Remove "shutdown" when using windows 2003 remote desktop but not from domain PC's

Hi
We have a mixed enviroment where users some time use laptopts that are member of our domain.
We have enabled a GPO rule to remove the shutdown button in
[User Configuration\Administrative Templates\Start Menu & Taskbar]

This works fine when users are using RDP
However when using Laptops, the problem is that the same rule is applied
The student has to first logoff their roaming profiles, then ctrl+alt+del to have an option to shut down the laptop.

Is there a way for this GPO rule only to apply when users uses remote desktop sessions?
Server is Windows 2003 R2 and Clients are Windows XP

Thanks
morten444Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Chris--WCommented:
Disable Shutdown option in Windows

This article will walk you through removing the shutdown option from Windows Server 2003/2008

On the server you want to block the Shutdown command do the following:
Go to Start > Run
Type in gpedit.msc in the Open field
The Group Policy window will appear. Choose User Configuration > Administrative Templates > Start Menu & Taskbar from the left-hand side panel as shown below
In the right-hand side panel, double-click on Remove And Prevent Access To Shut Down Command
A pop will appear. Set it to Enabled

This will remove the Shutdown option from the Start menu immediately after clicking Apply. The system can only be shutdown via the command prompt from this point forward.




http://www.hosting.com/support/windows-server-2008/disable-shutdown-option-in-windows
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Raj-GTSystems EngineerCommented:
You can apply a loopback policy on the laptops OU container to enable Shutdown option.

1. Create a new policy and link it to the OU container with the laptops.
2. Edit the policy and enable policy loopback processing (computer configuration > Administrative Templates > System > Group Policy > User Group Policy loopback processing mode > merge)
3. Enable Shutdown menu option (User Configuration>Administrative Templates>Start Menu & Taskbar > Remove and prevent access to shutdown... > disable)

That should do it.
0
David Johnson, CD, MVPOwnerCommented:
use the above but instead of an OU use a wmi filter that uses the chassis container 'laptop" or notebook

http://blogs.technet.com/b/heyscriptingguy/archive/2004/09/21/how-can-i-determine-if-a-computer-is-a-laptop-or-a-desktop-machine.aspx
0
McKnifeCommented:
The wmi filter is a good idea. But I would rather not use any policy here. As normal users may not shut down servers by default, hiding the button made not much sense in the first place.
0
morten444Author Commented:
Just what i needed
Thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.