Solved

How to enabled the GPO User Rights Assignment

Posted on 2009-05-12
6
577 Views
Last Modified: 2013-12-27
when i go to start ==> Run
                     type in "gpedit.msc"
                     Then navigate to:   computer configuration -> windows settings -> local policies -> user rights assignment then i want to changes in "force shutdown from a remote system" its showing me in the button add & remove are both disable that you cannot change anything from them. How i can enabled this and change the user rights?
   Please help me......

0
Comment
Question by:seraj786
  • 3
  • 2
6 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 24366321
Group policy is defined at the Local level and can also be linked at the
Site >> Domain >> and OU level.
Site, Domain and OU level policies will win and take precedence
LSDOU -- good acronym to google.
What you can do is run an RSoP report using GPMC or use gpresult to see where that setting is being set from
Thanks
 
Mike
0
 
LVL 18

Expert Comment

by:Americom
ID: 24366361
You should probably use GPMC to manage GPOs. I believe your are looking at the local policy and there's a Domain policy in placed and therefore you cannot make the change. Are you using GPMC or you want to make change on the local policy which I don't suggest as you can use OU to force this changes to specific servers etc.
0
 

Author Comment

by:seraj786
ID: 24366372
i am using GPMC
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 57

Expert Comment

by:Mike Kline
ID: 24366589
perfect then you can run an RSoP report against that box and see where the user rights assignment is being set at
0
 

Author Comment

by:seraj786
ID: 24366822
thank you very much mkline71................
now i can change.......

but one thing more is there a way to find out who's user in my AD was doing this remote shutdown?

thank again and you make my days okey.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24366911
Try looking in the security logs on the machine for event 513 (system shutting down)
Event 512 is windows starting up.
Thanks
Mike
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Moving your enterprise fax infrastructure from in-house fax machines and servers to the cloud makes sense — from both an efficiency and productivity standpoint. But does migrating to a cloud fax solution mean you will no longer be able to send or re…
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now