• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1943
  • Last Modified:

Remove "shutdown" when using windows 2003 remote desktop but not from domain PC's

We have a mixed enviroment where users some time use laptopts that are member of our domain.
We have enabled a GPO rule to remove the shutdown button in
[User Configuration\Administrative Templates\Start Menu & Taskbar]

This works fine when users are using RDP
However when using Laptops, the problem is that the same rule is applied
The student has to first logoff their roaming profiles, then ctrl+alt+del to have an option to shut down the laptop.

Is there a way for this GPO rule only to apply when users uses remote desktop sessions?
Server is Windows 2003 R2 and Clients are Windows XP

1 Solution
Disable Shutdown option in Windows

This article will walk you through removing the shutdown option from Windows Server 2003/2008

On the server you want to block the Shutdown command do the following:
Go to Start > Run
Type in gpedit.msc in the Open field
The Group Policy window will appear. Choose User Configuration > Administrative Templates > Start Menu & Taskbar from the left-hand side panel as shown below
In the right-hand side panel, double-click on Remove And Prevent Access To Shut Down Command
A pop will appear. Set it to Enabled

This will remove the Shutdown option from the Start menu immediately after clicking Apply. The system can only be shutdown via the command prompt from this point forward.

Raj-GTSystems EngineerCommented:
You can apply a loopback policy on the laptops OU container to enable Shutdown option.

1. Create a new policy and link it to the OU container with the laptops.
2. Edit the policy and enable policy loopback processing (computer configuration > Administrative Templates > System > Group Policy > User Group Policy loopback processing mode > merge)
3. Enable Shutdown menu option (User Configuration>Administrative Templates>Start Menu & Taskbar > Remove and prevent access to shutdown... > disable)

That should do it.
David Johnson, CD, MVPOwnerCommented:
use the above but instead of an OU use a wmi filter that uses the chassis container 'laptop" or notebook

The wmi filter is a good idea. But I would rather not use any policy here. As normal users may not shut down servers by default, hiding the button made not much sense in the first place.
morten444Author Commented:
Just what i needed
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now