Solved

Power User's can't reboot or shutdown in Windows 7

Posted on 2010-09-14
6
676 Views
Last Modified: 2012-05-10
We have created a custom Windows 7 image and ran into an issue with our Power User's group.  In the image if a user is added to this group the options for shutdown, restart, sleep and hibernate are all greyed out.  The user can only lock and logout of computer.  Is there a premission setting we could change in the registery or elsewhere to prevent this?  Also, the user does not have the ability to change the default profile to personalize.  I tested this by doing a flat load of Windows 7 and the power user was able to use the shutdown menu and personalize.  
0
Comment
Question by:marmarmat
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 59

Expert Comment

by:LeeTutor
ID: 33673063
0
 

Author Comment

by:marmarmat
ID: 33673155
We have created a custom Windows 7 Image and added the option to Copy the Admistrator's profile to the default profile in our answerfile.xml. When loading this image on other machines, users can not shutdown or reboot the PC. Only users that are part of the local administrators group have these options.

In Windows XP when setting up the default profile on an image you could copy a profile to the Default Profile and you would have to allow the "Everyone" group access to change it. It seems like I need something like this in W7.
0
 
LVL 78

Accepted Solution

by:
arnold earned 500 total points
ID: 33674410
Is the system a member of an AD domain?
Do you have GPos that restrict who can power off the system?
Did you configure a local policy on the windows 7 from which you are creating an image a restriction on who can poweroff the system?

One of these would explain.

If in an AD, use GPMC to run Group policy results wizard to see which policies/settings are set for the user and there you may see why this user on this system is not able to poweroff/reboot.

At times, a membership in another group could be the culprit.
i.e. you have users denied power off, the user you have is a member of the power users but is also a member of users, the deny for the users group will be processed first and enforced.
0
Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

 

Author Comment

by:marmarmat
ID: 33674514
Yes the system is a member of an AD group, since we are just starting to migrate over to Windows 7 we yet to set any GPos.  I didn't configure a local policy as i started from a base image of Windows 7 using Audit mode to setup image.  I will use the GPMC to check the policy settings for the user.

Thanks for the information I will look into the policy settings and let you know the results.
0
 
LVL 78

Assisted Solution

by:arnold
arnold earned 500 total points
ID: 33674963
The existing GPOs that apply to windows 2000/XP will apply to the windows 7 ones.
The windows 7 have additional Group preferences.
0
 

Author Comment

by:marmarmat
ID: 33676858
Yes, arnold you were correct, there were exsiting GPo's in place.  I not apart of the team who handles our GP's so I wasn't exactly sure but thought it had to be something referring to GP's.

Thanks for you help
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question