Solved

How to enabled the GPO User Rights Assignment

Posted on 2009-05-12
6
578 Views
Last Modified: 2013-12-27
when i go to start ==> Run
                     type in "gpedit.msc"
                     Then navigate to:   computer configuration -> windows settings -> local policies -> user rights assignment then i want to changes in "force shutdown from a remote system" its showing me in the button add & remove are both disable that you cannot change anything from them. How i can enabled this and change the user rights?
   Please help me......

0
Comment
Question by:seraj786
  • 3
  • 2
6 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 24366321
Group policy is defined at the Local level and can also be linked at the
Site >> Domain >> and OU level.
Site, Domain and OU level policies will win and take precedence
LSDOU -- good acronym to google.
What you can do is run an RSoP report using GPMC or use gpresult to see where that setting is being set from
Thanks
 
Mike
0
 
LVL 18

Expert Comment

by:Americom
ID: 24366361
You should probably use GPMC to manage GPOs. I believe your are looking at the local policy and there's a Domain policy in placed and therefore you cannot make the change. Are you using GPMC or you want to make change on the local policy which I don't suggest as you can use OU to force this changes to specific servers etc.
0
 

Author Comment

by:seraj786
ID: 24366372
i am using GPMC
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
LVL 57

Expert Comment

by:Mike Kline
ID: 24366589
perfect then you can run an RSoP report against that box and see where the user rights assignment is being set at
0
 

Author Comment

by:seraj786
ID: 24366822
thank you very much mkline71................
now i can change.......

but one thing more is there a way to find out who's user in my AD was doing this remote shutdown?

thank again and you make my days okey.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24366911
Try looking in the security logs on the machine for event 513 (system shutting down)
Event 512 is windows starting up.
Thanks
Mike
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question