Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Shutdown, Hibernate, Sleep, Restart disabled

Posted on 2010-08-26
9
Medium Priority
?
1,250 Views
Last Modified: 2012-06-27
Hi all, so apparently on this domain that I did not build there was a reason to disable to the power button/hibernate and sleep commands. I went into the GPOs for the domain and in the User Configuration--> Administrative Templaters-->Start Menu and Taskbar the "Remove and prevent access to the Shutdown Command" was not configured, but all the users except Administrator (including me, who is a member of the administrators group!?!) do not have access to any of these commands. I went as far as to explicitly disable this GPO in sub-OUs and on my local machine. Did gpupdate /force, logged on and off multiple times, it is still disable. The does not seem to be a GPO backup available. Where could this setting be coming from ???
0
Comment
Question by:asidhd
  • 3
  • 2
  • 2
  • +1
9 Comments
 
LVL 3

Expert Comment

by:jillmjones
ID: 33534747
you can find out where this setting is coming from by running a resultant set of group policy. If the group policy is not setting it, then someone hacked the registry to make it happen.
0
 
LVL 2

Expert Comment

by:LTCexpert
ID: 33534755
Try running rsop or group policy results wizard aginst an effected machine or user.
This will return all the group policies along with the settings that this machine / user is running.

If you don't find it here it is likely to be configured locally on the machine rather than a gpo.
0
 
LVL 3

Expert Comment

by:jillmjones
ID: 33534761
Check this section Computer Configuration | Administrative Templates | System | Power Management
0
New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

 
LVL 3

Expert Comment

by:Fr0zT
ID: 33534764
Are you looking just at 1 policy using gpedit.msc or the whole forests policy using gpmc.msc?  There might be other policies which still have the setting in it that you need to change...
0
 

Author Comment

by:asidhd
ID: 33535176
Fr0zT,
I was logging onto the domain controller, so I assume it is gpmc, I see the whole forest, there is only one domain anyway...

Others:
That's an idea, I have never ha to do that before so thanks for the advice.
0
 
LVL 3

Expert Comment

by:Fr0zT
ID: 33536301
Just go to run and type gpmc.msc, you'll see what I mean.  There could be more policies than just one.
0
 

Author Comment

by:asidhd
ID: 33542024
ok, I did this and the only GPO I can find related to this is the one that explicitly disables the "remove shutdown, sleep, hibernate, ect"... Where could this be coming from??? I looked through the scripts and there is a "powercfg.exe" being called, so I renamed that file everywhere I could find to .exe111 and it's still grayed out. OMG, I'm pulling my hair out here. Please help. Also, I a member of domain admin, and it is grayed out for me, but not for "administrator" on the domain.  
0
 
LVL 2

Expert Comment

by:LTCexpert
ID: 33550455
When you say " I did this" I assume the was an rsop or group policy results wizard?
If so you may have done this already but. Did you see results for both the machine and the user.
This type of gpo could be set on either.

Is your user in a different OU to the domain administrator account? You could try putting your user account into the same OU as the administrator The is sorts it then it will be a user policy that is applied to your original OU.

Be sure that you have another account available to put things back as they were incase this looks your account out of anything else.  
0
 

Accepted Solution

by:
asidhd earned 0 total points
ID: 33693582
Guys, it was a local security policy, I finally dug it out...
0

Featured Post

Ready for your healthcare security check-up?

In the past few years, healthcare organizations have become a prime target for advanced attacks. Does your organization have what it needs to defend itself? Schedule your healthcare security check-up today and download our free Healthcare Security Resource Kit today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

927 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question