Solved

Shutdown, Hibernate, Sleep, Restart disabled

Posted on 2010-08-26
9
1,237 Views
Last Modified: 2012-06-27
Hi all, so apparently on this domain that I did not build there was a reason to disable to the power button/hibernate and sleep commands. I went into the GPOs for the domain and in the User Configuration--> Administrative Templaters-->Start Menu and Taskbar the "Remove and prevent access to the Shutdown Command" was not configured, but all the users except Administrator (including me, who is a member of the administrators group!?!) do not have access to any of these commands. I went as far as to explicitly disable this GPO in sub-OUs and on my local machine. Did gpupdate /force, logged on and off multiple times, it is still disable. The does not seem to be a GPO backup available. Where could this setting be coming from ???
0
Comment
Question by:asidhd
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
9 Comments
 
LVL 3

Expert Comment

by:jillmjones
ID: 33534747
you can find out where this setting is coming from by running a resultant set of group policy. If the group policy is not setting it, then someone hacked the registry to make it happen.
0
 
LVL 2

Expert Comment

by:LTCexpert
ID: 33534755
Try running rsop or group policy results wizard aginst an effected machine or user.
This will return all the group policies along with the settings that this machine / user is running.

If you don't find it here it is likely to be configured locally on the machine rather than a gpo.
0
 
LVL 3

Expert Comment

by:jillmjones
ID: 33534761
Check this section Computer Configuration | Administrative Templates | System | Power Management
0
Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 3

Expert Comment

by:Fr0zT
ID: 33534764
Are you looking just at 1 policy using gpedit.msc or the whole forests policy using gpmc.msc?  There might be other policies which still have the setting in it that you need to change...
0
 

Author Comment

by:asidhd
ID: 33535176
Fr0zT,
I was logging onto the domain controller, so I assume it is gpmc, I see the whole forest, there is only one domain anyway...

Others:
That's an idea, I have never ha to do that before so thanks for the advice.
0
 
LVL 3

Expert Comment

by:Fr0zT
ID: 33536301
Just go to run and type gpmc.msc, you'll see what I mean.  There could be more policies than just one.
0
 

Author Comment

by:asidhd
ID: 33542024
ok, I did this and the only GPO I can find related to this is the one that explicitly disables the "remove shutdown, sleep, hibernate, ect"... Where could this be coming from??? I looked through the scripts and there is a "powercfg.exe" being called, so I renamed that file everywhere I could find to .exe111 and it's still grayed out. OMG, I'm pulling my hair out here. Please help. Also, I a member of domain admin, and it is grayed out for me, but not for "administrator" on the domain.  
0
 
LVL 2

Expert Comment

by:LTCexpert
ID: 33550455
When you say " I did this" I assume the was an rsop or group policy results wizard?
If so you may have done this already but. Did you see results for both the machine and the user.
This type of gpo could be set on either.

Is your user in a different OU to the domain administrator account? You could try putting your user account into the same OU as the administrator The is sorts it then it will be a user policy that is applied to your original OU.

Be sure that you have another account available to put things back as they were incase this looks your account out of anything else.  
0
 

Accepted Solution

by:
asidhd earned 0 total points
ID: 33693582
Guys, it was a local security policy, I finally dug it out...
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Invest in your employees with these five simple steps to improve employee engagement and retention.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question