• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 592
  • Last Modified:

How to enabled the GPO User Rights Assignment

when i go to start ==> Run
                     type in "gpedit.msc"
                     Then navigate to:   computer configuration -> windows settings -> local policies -> user rights assignment then i want to changes in "force shutdown from a remote system" its showing me in the button add & remove are both disable that you cannot change anything from them. How i can enabled this and change the user rights?
   Please help me......

0
seraj786
Asked:
seraj786
  • 3
  • 2
1 Solution
 
Mike KlineCommented:
Group policy is defined at the Local level and can also be linked at the
Site >> Domain >> and OU level.
Site, Domain and OU level policies will win and take precedence
LSDOU -- good acronym to google.
What you can do is run an RSoP report using GPMC or use gpresult to see where that setting is being set from
Thanks
 
Mike
0
 
AmericomCommented:
You should probably use GPMC to manage GPOs. I believe your are looking at the local policy and there's a Domain policy in placed and therefore you cannot make the change. Are you using GPMC or you want to make change on the local policy which I don't suggest as you can use OU to force this changes to specific servers etc.
0
 
seraj786Author Commented:
i am using GPMC
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
Mike KlineCommented:
perfect then you can run an RSoP report against that box and see where the user rights assignment is being set at
0
 
seraj786Author Commented:
thank you very much mkline71................
now i can change.......

but one thing more is there a way to find out who's user in my AD was doing this remote shutdown?

thank again and you make my days okey.
0
 
Mike KlineCommented:
Try looking in the security logs on the machine for event 513 (system shutting down)
Event 512 is windows starting up.
Thanks
Mike
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now