?
Solved

group security policy

Posted on 2011-02-25
6
Medium Priority
?
350 Views
Last Modified: 2012-05-11
I am going to re-install Server 2003 and can't remember how a group policy was set up.  We use terminal services and the terminal service user does not have the option on the start menu to shut down the server.
I can see there is a security group created named "No-shutdown" with the appropriate users as members, but I can't remember how to set up the restriction to block the shutdown button.
0
Comment
Question by:a1electric
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
6 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34981884
Take a look at this question and screenshots that I helped with

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_24554443.html

Remove and prevent access to the shutdown command

and for those using 2008 the setting name has changed a bit  

http://scorpiotek.com/blog/?p=626

Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands

Thanks

Mike
0
 
LVL 3

Expert Comment

by:rxdeath
ID: 34981894
server2003 does that automatically for domain users, it should suppress the shutdown button unless you have something overriding it.

however it is in the gpo under

user configuration
administrative templates
start menu
remove and prevent access to the shut down command
0
 

Author Comment

by:a1electric
ID: 34982062
How do I get to the Group Policy Object Editor?  I see the option under administrative tools for Group Policy Management, but that is not exactly the same place.
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 34982081
You right click on a GPO and select edit.
0
 

Author Comment

by:a1electric
ID: 34982183
Ok, I can see that "remove access to the shutdown command" is enabled.  

Just one more thing - my security group called "No Shutdown" - how did I associate this group with the policy?  Currently, only the users in the "No Shutdown" security group are restricted from seeing the shutdown command.
0
 
LVL 3

Expert Comment

by:rxdeath
ID: 34982467
you have to put it in the correct OU
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses
Course of the Month10 days, 19 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question