Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 9932
  • Last Modified:

Remove Shutdown option for specific servers

I want the Shut Down option to be removed from all servers. I have the servers in their own OU and a policy that restricts only Domain Admins to be able to shut down. But the only way to remove this option is via User Configuration setting. When this setting is applied to any users, those users are also restricted from seeing the Shut Down option on ALL copmuters, not just the servers.
0
itadmins590
Asked:
itadmins590
  • 5
  • 4
  • 2
  • +1
1 Solution
 
Darius GhassemCommented:
One more this that might be a better solution. Set up local policies on these servers. Go to computer config -> Windows settings -> security -> user right assignment -> shut down the system.
0
 
itadmins590Author Commented:
This only setup permissions to who is allowed to shut down. As I am allowed, I could accidentally hit the Shut Down options sense it still shows. I want it to be hidden from me only on servers.

Thanks
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
itadmins590Author Commented:
This only hides the Disconnect option from Terminal sessions. I log on as a Domain Admin via RDC, and the Shut Down option is visible, just want to hide this option.

Thanks
0
 
Darius GhassemCommented:
You can hide this option in the local policy User Configuration - Administrative Templates - Start Menus and TAskbar - Remove and prevent access to the shutdown command {enabled}
0
 
LauraEHunterMVPCommented:
In re: dariusg's suggestion - be aware that if your environment has any domain-based Group Policy Objects configured that define these settings, the domain-based GPOs will overwrite any local policies that you have configured on each server.
0
 
Darius GhassemCommented:
For got to mention that.
0
 
itadmins590Author Commented:
I saw that option, but wanted to do it via Domain GP as to limit the amount of work. We have over 50 servers and it would take a while to modify each local policy. If I edit this option in Domain GP, it will apply to every server and pc which we don't want.

Thanks
0
 
Darius GhassemCommented:
I don't know of another way except through the local policy which won't effect any of  the users if they aren't logged into the terminal server.

http://nicolask.wordpress.com/2008/02/17/copy-local-policy-settings-between-servers/
0
 
minvisCommented:
Use loopback processing (Computer configuration > administrative templates > system > group policy > loopback processing) to apply a user setting to a computer.

http://support.microsoft.com/kb/231287/en-us
0
 
itadmins590Author Commented:
<P>Sounds like the loopback option is the way to go, although it is not working. Perhaps I'm not configuring it correctly. The servers are in a OU by themselves, I created a GPO with the Loopback seeting, set it to merge. Then in the same GPO set a user settings to hide the Shutdown.</P><P>Is this correct?</P>
0
 
minvisCommented:
Completely correct. this should work. can you make screendumps?
0

Featured Post

Ask an Anonymous Question!

Don't feel intimidated by what you don't know. Ask your question anonymously. It's easy! Learn more and upgrade.

  • 5
  • 4
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now