Solved

remote shut down of machines

Posted on 2013-01-21
7
286 Views
Last Modified: 2013-01-25
Hi there,
Running server 2008 R2 domain, with window 7 prof clients.  Many users came today complaingint that someone is remotely shutting their machines down.  What can be safely set into the AD so that no one can shutdown my client machines.
THanks
0
Comment
Question by:amanzoor
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
7 Comments
 
LVL 1

Assisted Solution

by:cgitek
cgitek earned 100 total points
ID: 38801651
Ok so you will need to look here first and create your GPO. I believe this is the same for W7.

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/539.mspx?mfr=true

You will also want to make sure you change the local Administrator password or disable local logons again using GPO to prohibit someone using a local account to reboot the workstation.
0
 
LVL 27

Expert Comment

by:Jason Watkins
ID: 38801657
I would make sure this setting is set at a domain level GPO and not on the local GPO
0
 
LVL 4

Author Comment

by:amanzoor
ID: 38815799
My domain level and domain controller level GPOs are all fine, the problem I have found is that on all these laptops, the users belong to a group called 'student' and this groups has been added to the local administrators group.  I think this is the reason they can shut down each others machines.  If I remove this groups from the local administrators group then these users cannot install any apps, or software.  What can I do?  help
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 27

Accepted Solution

by:
Jason Watkins earned 400 total points
ID: 38815894
In the domain or local GPO you can control exactly which users can or cannot shutdown the computer.

Computer Configuration \ Windows Settings \ Security Settings \ Local Policies \ User Rights Assignments \ Shut down the system

Change this to be only one group or user and you will be all-set.
0
 
LVL 1

Expert Comment

by:cgitek
ID: 38817004
Just create a special group and make the actual administrator account the only member of that group...assign using the above method I and Firebar mentioned and you're done.
0
 
LVL 4

Author Comment

by:amanzoor
ID: 38817300
firebar and cgitek,
By putting assigning these GPO settings, will the laptop users will be able to shut their own machines down or no?  As a rule they should be able to shut down their own laptops and not anyone else?
0
 
LVL 27

Expert Comment

by:Jason Watkins
ID: 38818462
To do what you have described, a local GPO would have to be used. On each machine, simply add the user who should be able to shut down the computer, to the GPO.
0

Featured Post

Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Suggested Courses

622 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question