Solved

group security policy

Posted on 2011-02-25
6
345 Views
Last Modified: 2012-05-11
I am going to re-install Server 2003 and can't remember how a group policy was set up.  We use terminal services and the terminal service user does not have the option on the start menu to shut down the server.
I can see there is a security group created named "No-shutdown" with the appropriate users as members, but I can't remember how to set up the restriction to block the shutdown button.
0
Comment
Question by:a1electric
  • 2
  • 2
  • 2
6 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34981884
Take a look at this question and screenshots that I helped with

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_24554443.html

Remove and prevent access to the shutdown command

and for those using 2008 the setting name has changed a bit  

http://scorpiotek.com/blog/?p=626

Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands

Thanks

Mike
0
 
LVL 3

Expert Comment

by:rxdeath
ID: 34981894
server2003 does that automatically for domain users, it should suppress the shutdown button unless you have something overriding it.

however it is in the gpo under

user configuration
administrative templates
start menu
remove and prevent access to the shut down command
0
 

Author Comment

by:a1electric
ID: 34982062
How do I get to the Group Policy Object Editor?  I see the option under administrative tools for Group Policy Management, but that is not exactly the same place.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 34982081
You right click on a GPO and select edit.
0
 

Author Comment

by:a1electric
ID: 34982183
Ok, I can see that "remove access to the shutdown command" is enabled.  

Just one more thing - my security group called "No Shutdown" - how did I associate this group with the policy?  Currently, only the users in the "No Shutdown" security group are restricted from seeing the shutdown command.
0
 
LVL 3

Expert Comment

by:rxdeath
ID: 34982467
you have to put it in the correct OU
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now