How do I change group policy to allow users to logoff and shutdown or restart their computers

manelson05
manelson05 used Ask the Experts™
on
I recently reinstaleld the default group policy and none of the users have the ability to shutdown or restart their computers in the start menu.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
This is governed by the Shut down the system setting under the node Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment.
you can get to this settings from cmd -> gpedit.msc

Author

Commented:
I accessed this on the DC under GPO mgmgt tool, this is correct since I wish to apply to all doamin computers correct?

Would log off also be in here? I amnew to GPO it is truly vast as to what youcan do.
How to Generate Services Revenue the Easiest Way

This Tuesday! Learn key insights about modern cyber protection services & gain practical strategies to skyrocket business:

- What it takes to build a cloud service portfolio
- How to determine which services will help your unique business grow
- Various use-cases and examples

Author

Commented:
I just added users in this and ran gpupdate /force I had a user log off and log on but there shutdown feature is still not there.

Any thoughts?

Commented:
go to your active directory right click on the oU i believe or one of the tabs there go to propertoes and loook for group policy .. there you will be able to edit the policy for all domain users.

Author

Commented:
I dont see that in AD

Author

Commented:
I still have random users ont eh domain with Vista Business and a few Win 7 pro users who are ntoa ble to select shutdown or restart.

Please advise.
open up the GPMC and EDIT the Default Domain Policy.  This policy's settings are at the very top, so they overwrite any settings that are set lower in the OU structure.  Then modify the settings that Shift-3 mentioned in the first post:

This is governed by the Shut down the system setting under the node Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment.

Author

Commented:
Most of the users settings have changed back however their are still 2 users who cannot see the shutdown settings??? This is so bizzare.
Are these two users in the same OU (Organisational Unit) in Active Directory where the other users are?  If there not, then the GPO may not be applying to them.
run gpupdate /force on that computers
did you change
user right assignment in the default policy or inside the other - if other, enforce it.

Author

Commented:
That seemed to work but not sure why a handful of pc's were so very slow to update their policy.
try to determine what are the settings for updating policy (default is 30 minutes), maybe the policy collides with another one ?

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial