Solved

Shutdown, Hibernate, Sleep, Restart disabled

Posted on 2010-08-26
9
1,232 Views
Last Modified: 2012-06-27
Hi all, so apparently on this domain that I did not build there was a reason to disable to the power button/hibernate and sleep commands. I went into the GPOs for the domain and in the User Configuration--> Administrative Templaters-->Start Menu and Taskbar the "Remove and prevent access to the Shutdown Command" was not configured, but all the users except Administrator (including me, who is a member of the administrators group!?!) do not have access to any of these commands. I went as far as to explicitly disable this GPO in sub-OUs and on my local machine. Did gpupdate /force, logged on and off multiple times, it is still disable. The does not seem to be a GPO backup available. Where could this setting be coming from ???
0
Comment
Question by:asidhd
  • 3
  • 2
  • 2
  • +1
9 Comments
 
LVL 3

Expert Comment

by:jillmjones
ID: 33534747
you can find out where this setting is coming from by running a resultant set of group policy. If the group policy is not setting it, then someone hacked the registry to make it happen.
0
 
LVL 2

Expert Comment

by:LTCexpert
ID: 33534755
Try running rsop or group policy results wizard aginst an effected machine or user.
This will return all the group policies along with the settings that this machine / user is running.

If you don't find it here it is likely to be configured locally on the machine rather than a gpo.
0
 
LVL 3

Expert Comment

by:jillmjones
ID: 33534761
Check this section Computer Configuration | Administrative Templates | System | Power Management
0
 
LVL 3

Expert Comment

by:Fr0zT
ID: 33534764
Are you looking just at 1 policy using gpedit.msc or the whole forests policy using gpmc.msc?  There might be other policies which still have the setting in it that you need to change...
0
 

Author Comment

by:asidhd
ID: 33535176
Fr0zT,
I was logging onto the domain controller, so I assume it is gpmc, I see the whole forest, there is only one domain anyway...

Others:
That's an idea, I have never ha to do that before so thanks for the advice.
0
 
LVL 3

Expert Comment

by:Fr0zT
ID: 33536301
Just go to run and type gpmc.msc, you'll see what I mean.  There could be more policies than just one.
0
 

Author Comment

by:asidhd
ID: 33542024
ok, I did this and the only GPO I can find related to this is the one that explicitly disables the "remove shutdown, sleep, hibernate, ect"... Where could this be coming from??? I looked through the scripts and there is a "powercfg.exe" being called, so I renamed that file everywhere I could find to .exe111 and it's still grayed out. OMG, I'm pulling my hair out here. Please help. Also, I a member of domain admin, and it is grayed out for me, but not for "administrator" on the domain.  
0
 
LVL 2

Expert Comment

by:LTCexpert
ID: 33550455
When you say " I did this" I assume the was an rsop or group policy results wizard?
If so you may have done this already but. Did you see results for both the machine and the user.
This type of gpo could be set on either.

Is your user in a different OU to the domain administrator account? You could try putting your user account into the same OU as the administrator The is sorts it then it will be a user policy that is applied to your original OU.

Be sure that you have another account available to put things back as they were incase this looks your account out of anything else.  
0
 

Accepted Solution

by:
asidhd earned 0 total points
ID: 33693582
Guys, it was a local security policy, I finally dug it out...
0

Join & Write a Comment

Learn about cloud computing and its benefits for small business owners.
Resolve DNS query failed errors for Exchange
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now