Solved

Shutdown, Hibernate, Sleep, Restart disabled

Posted on 2010-08-26
9
1,242 Views
Last Modified: 2012-06-27
Hi all, so apparently on this domain that I did not build there was a reason to disable to the power button/hibernate and sleep commands. I went into the GPOs for the domain and in the User Configuration--> Administrative Templaters-->Start Menu and Taskbar the "Remove and prevent access to the Shutdown Command" was not configured, but all the users except Administrator (including me, who is a member of the administrators group!?!) do not have access to any of these commands. I went as far as to explicitly disable this GPO in sub-OUs and on my local machine. Did gpupdate /force, logged on and off multiple times, it is still disable. The does not seem to be a GPO backup available. Where could this setting be coming from ???
0
Comment
Question by:asidhd
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
9 Comments
 
LVL 3

Expert Comment

by:jillmjones
ID: 33534747
you can find out where this setting is coming from by running a resultant set of group policy. If the group policy is not setting it, then someone hacked the registry to make it happen.
0
 
LVL 2

Expert Comment

by:LTCexpert
ID: 33534755
Try running rsop or group policy results wizard aginst an effected machine or user.
This will return all the group policies along with the settings that this machine / user is running.

If you don't find it here it is likely to be configured locally on the machine rather than a gpo.
0
 
LVL 3

Expert Comment

by:jillmjones
ID: 33534761
Check this section Computer Configuration | Administrative Templates | System | Power Management
0
Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 3

Expert Comment

by:Fr0zT
ID: 33534764
Are you looking just at 1 policy using gpedit.msc or the whole forests policy using gpmc.msc?  There might be other policies which still have the setting in it that you need to change...
0
 

Author Comment

by:asidhd
ID: 33535176
Fr0zT,
I was logging onto the domain controller, so I assume it is gpmc, I see the whole forest, there is only one domain anyway...

Others:
That's an idea, I have never ha to do that before so thanks for the advice.
0
 
LVL 3

Expert Comment

by:Fr0zT
ID: 33536301
Just go to run and type gpmc.msc, you'll see what I mean.  There could be more policies than just one.
0
 

Author Comment

by:asidhd
ID: 33542024
ok, I did this and the only GPO I can find related to this is the one that explicitly disables the "remove shutdown, sleep, hibernate, ect"... Where could this be coming from??? I looked through the scripts and there is a "powercfg.exe" being called, so I renamed that file everywhere I could find to .exe111 and it's still grayed out. OMG, I'm pulling my hair out here. Please help. Also, I a member of domain admin, and it is grayed out for me, but not for "administrator" on the domain.  
0
 
LVL 2

Expert Comment

by:LTCexpert
ID: 33550455
When you say " I did this" I assume the was an rsop or group policy results wizard?
If so you may have done this already but. Did you see results for both the machine and the user.
This type of gpo could be set on either.

Is your user in a different OU to the domain administrator account? You could try putting your user account into the same OU as the administrator The is sorts it then it will be a user policy that is applied to your original OU.

Be sure that you have another account available to put things back as they were incase this looks your account out of anything else.  
0
 

Accepted Solution

by:
asidhd earned 0 total points
ID: 33693582
Guys, it was a local security policy, I finally dug it out...
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here's a look at newsworthy articles and community happenings during the last month.
OnPage enhanced its integration with ConnectWise Manage to offer incident responders more control over the ticket and Incident Resolution Lifecycle.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Suggested Courses

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question