Solved

Remove Shutdown option for specific servers

Posted on 2008-06-24
14
9,632 Views
Last Modified: 2008-07-24
I want the Shut Down option to be removed from all servers. I have the servers in their own OU and a policy that restricts only Domain Admins to be able to shut down. But the only way to remove this option is via User Configuration setting. When this setting is applied to any users, those users are also restricted from seeing the Shut Down option on ALL copmuters, not just the servers.
0
Comment
Question by:itadmins590
  • 5
  • 4
  • 2
  • +1
14 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 21856814
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 21856880
One more this that might be a better solution. Set up local policies on these servers. Go to computer config -> Windows settings -> security -> user right assignment -> shut down the system.
0
 

Author Comment

by:itadmins590
ID: 21857102
This only setup permissions to who is allowed to shut down. As I am allowed, I could accidentally hit the Shut Down options sense it still shows. I want it to be hidden from me only on servers.

Thanks
0
 

Author Comment

by:itadmins590
ID: 21857186
This only hides the Disconnect option from Terminal sessions. I log on as a Domain Admin via RDC, and the Shut Down option is visible, just want to hide this option.

Thanks
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 21857532
You can hide this option in the local policy User Configuration - Administrative Templates - Start Menus and TAskbar - Remove and prevent access to the shutdown command {enabled}
0
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 21857608
In re: dariusg's suggestion - be aware that if your environment has any domain-based Group Policy Objects configured that define these settings, the domain-based GPOs will overwrite any local policies that you have configured on each server.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 21857628
For got to mention that.
0
 

Author Comment

by:itadmins590
ID: 21857759
I saw that option, but wanted to do it via Domain GP as to limit the amount of work. We have over 50 servers and it would take a while to modify each local policy. If I edit this option in Domain GP, it will apply to every server and pc which we don't want.

Thanks
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 21858043
I don't know of another way except through the local policy which won't effect any of  the users if they aren't logged into the terminal server.

http://nicolask.wordpress.com/2008/02/17/copy-local-policy-settings-between-servers/
0
 
LVL 5

Accepted Solution

by:
minvis earned 125 total points
ID: 21873264
Use loopback processing (Computer configuration > administrative templates > system > group policy > loopback processing) to apply a user setting to a computer.

http://support.microsoft.com/kb/231287/en-us
0
 

Author Comment

by:itadmins590
ID: 21887501
<P>Sounds like the loopback option is the way to go, although it is not working. Perhaps I'm not configuring it correctly. The servers are in a OU by themselves, I created a GPO with the Loopback seeting, set it to merge. Then in the same GPO set a user settings to hide the Shutdown.</P><P>Is this correct?</P>
0
 
LVL 5

Expert Comment

by:minvis
ID: 21891582
Completely correct. this should work. can you make screendumps?
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Synchronize a new Active Directory domain with an existing Office 365 tenant
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now