[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Power User's can't reboot or shutdown in Windows 7

Posted on 2010-09-14
6
Medium Priority
?
680 Views
Last Modified: 2012-05-10
We have created a custom Windows 7 image and ran into an issue with our Power User's group.  In the image if a user is added to this group the options for shutdown, restart, sleep and hibernate are all greyed out.  The user can only lock and logout of computer.  Is there a premission setting we could change in the registery or elsewhere to prevent this?  Also, the user does not have the ability to change the default profile to personalize.  I tested this by doing a flat load of Windows 7 and the power user was able to use the shutdown menu and personalize.  
0
Comment
Question by:marmarmat
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 59

Expert Comment

by:LeeTutor
ID: 33673063
0
 

Author Comment

by:marmarmat
ID: 33673155
We have created a custom Windows 7 Image and added the option to Copy the Admistrator's profile to the default profile in our answerfile.xml. When loading this image on other machines, users can not shutdown or reboot the PC. Only users that are part of the local administrators group have these options.

In Windows XP when setting up the default profile on an image you could copy a profile to the Default Profile and you would have to allow the "Everyone" group access to change it. It seems like I need something like this in W7.
0
 
LVL 80

Accepted Solution

by:
arnold earned 2000 total points
ID: 33674410
Is the system a member of an AD domain?
Do you have GPos that restrict who can power off the system?
Did you configure a local policy on the windows 7 from which you are creating an image a restriction on who can poweroff the system?

One of these would explain.

If in an AD, use GPMC to run Group policy results wizard to see which policies/settings are set for the user and there you may see why this user on this system is not able to poweroff/reboot.

At times, a membership in another group could be the culprit.
i.e. you have users denied power off, the user you have is a member of the power users but is also a member of users, the deny for the users group will be processed first and enforced.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:marmarmat
ID: 33674514
Yes the system is a member of an AD group, since we are just starting to migrate over to Windows 7 we yet to set any GPos.  I didn't configure a local policy as i started from a base image of Windows 7 using Audit mode to setup image.  I will use the GPMC to check the policy settings for the user.

Thanks for the information I will look into the policy settings and let you know the results.
0
 
LVL 80

Assisted Solution

by:arnold
arnold earned 2000 total points
ID: 33674963
The existing GPOs that apply to windows 2000/XP will apply to the windows 7 ones.
The windows 7 have additional Group preferences.
0
 

Author Comment

by:marmarmat
ID: 33676858
Yes, arnold you were correct, there were exsiting GPo's in place.  I not apart of the team who handles our GP's so I wasn't exactly sure but thought it had to be something referring to GP's.

Thanks for you help
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question