Default dc policy

Posted on 2009-12-29
Medium Priority
Last Modified: 2012-05-08
I have a network that was setup by someone else and it looks like they applies the default dc policy to the hole domain. when user want to shut down thier computer the only option they have is log off, so they need to log off then ctrl alt del and select oprion and then shutdown.
when ever i add a new computer the the domain it does the same think but I can not find in the default policy where this is set and there are no other gpo"s on the system.
does anyone know where this is set at the domain level.
Question by:jgajma
  • 2

Accepted Solution

Vinamilk1001 earned 2000 total points
ID: 26141292
Hello ,
Have you checked  the following parameter on the default domain policy :
-User Configuration>Administrative Templates and locate the option known as "Remove and prevent access to the shutdown command".
-Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\
If these settings are as default , check if there are not a login script that modify computer registry settings.
LVL 81

Expert Comment

ID: 26141546
The default domain controller policy only applies to the entire domain.
You can always unlik the defalt domain controller policy for the top of the domain and only apply it to the domain controllers OU.

Get GPMC for your server which will make things much easier, from:
Use GPMC logging mechanism to get a representation of what settings are set by which GPO.
You can change it.
There is another option that does not allow non-administrators to turn the system off.

Author Comment

ID: 26142023
No logon or logoff script
LVL 81

Expert Comment

ID: 26142168
Instead of searching every policy you have for a setting, run the GPMC results wizard and there you can see which setting comes from which policy/ies and which is the winning policy.  This way you can address the issue once and for all versus finding one, fixing it and then discovering that there is another policy that has this same setting.

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

My purpose is to describe the basic concepts of virtual memory as implemented in a modern Windows-based operating system. I will also describe the problems inherent in older systems and how virtual memory solves them. The dark ages - before virtu…
This article describes how to set permissions to allow a limited-permissions user to start and stop a particular System Service.   It is always best to give users only the permissions that they need to perform their job, so tweaking particular permi…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question