Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Shutdown, Hibernate, Sleep, Restart disabled

Posted on 2010-08-26
9
Medium Priority
?
1,247 Views
Last Modified: 2012-06-27
Hi all, so apparently on this domain that I did not build there was a reason to disable to the power button/hibernate and sleep commands. I went into the GPOs for the domain and in the User Configuration--> Administrative Templaters-->Start Menu and Taskbar the "Remove and prevent access to the Shutdown Command" was not configured, but all the users except Administrator (including me, who is a member of the administrators group!?!) do not have access to any of these commands. I went as far as to explicitly disable this GPO in sub-OUs and on my local machine. Did gpupdate /force, logged on and off multiple times, it is still disable. The does not seem to be a GPO backup available. Where could this setting be coming from ???
0
Comment
Question by:asidhd
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
9 Comments
 
LVL 3

Expert Comment

by:jillmjones
ID: 33534747
you can find out where this setting is coming from by running a resultant set of group policy. If the group policy is not setting it, then someone hacked the registry to make it happen.
0
 
LVL 2

Expert Comment

by:LTCexpert
ID: 33534755
Try running rsop or group policy results wizard aginst an effected machine or user.
This will return all the group policies along with the settings that this machine / user is running.

If you don't find it here it is likely to be configured locally on the machine rather than a gpo.
0
 
LVL 3

Expert Comment

by:jillmjones
ID: 33534761
Check this section Computer Configuration | Administrative Templates | System | Power Management
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 3

Expert Comment

by:Fr0zT
ID: 33534764
Are you looking just at 1 policy using gpedit.msc or the whole forests policy using gpmc.msc?  There might be other policies which still have the setting in it that you need to change...
0
 

Author Comment

by:asidhd
ID: 33535176
Fr0zT,
I was logging onto the domain controller, so I assume it is gpmc, I see the whole forest, there is only one domain anyway...

Others:
That's an idea, I have never ha to do that before so thanks for the advice.
0
 
LVL 3

Expert Comment

by:Fr0zT
ID: 33536301
Just go to run and type gpmc.msc, you'll see what I mean.  There could be more policies than just one.
0
 

Author Comment

by:asidhd
ID: 33542024
ok, I did this and the only GPO I can find related to this is the one that explicitly disables the "remove shutdown, sleep, hibernate, ect"... Where could this be coming from??? I looked through the scripts and there is a "powercfg.exe" being called, so I renamed that file everywhere I could find to .exe111 and it's still grayed out. OMG, I'm pulling my hair out here. Please help. Also, I a member of domain admin, and it is grayed out for me, but not for "administrator" on the domain.  
0
 
LVL 2

Expert Comment

by:LTCexpert
ID: 33550455
When you say " I did this" I assume the was an rsop or group policy results wizard?
If so you may have done this already but. Did you see results for both the machine and the user.
This type of gpo could be set on either.

Is your user in a different OU to the domain administrator account? You could try putting your user account into the same OU as the administrator The is sorts it then it will be a user policy that is applied to your original OU.

Be sure that you have another account available to put things back as they were incase this looks your account out of anything else.  
0
 

Accepted Solution

by:
asidhd earned 0 total points
ID: 33693582
Guys, it was a local security policy, I finally dug it out...
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Suggested Courses

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question