Avatar of CatholicTV
Flag for United States of America asked on

Domain User Access Rights

I have a generic standard user account that needs to be able to shutdown and restart domain joined servers. Since doing some Microsoft patching the user can no longer perform these functions. I read that adding the user to any of these groups would accomplish the task: Server Operators, Print Operators, or Backup Operators. That is just not the case anymore. Adding the user to any of those groups did not give them shut down and restart capabilities.

Any thoughts on how to accomplish this? Should I modify the Server Operator group to be able to do this?
Microsoft Legacy OSSecurity

Avatar of undefined
Last Comment

8/22/2022 - Mon

"shut down the system" is a privilege not held by the user. Adjust that.

how do you adjust that?

Open secpol.msc, look for"user right assignment".
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question

CatholicTV, my solution works. next time please tell me where you are stuck at, so I can help you instead of closing :)

The solutions suggested did not work for what I was trying to accomplish. I figured out on my own what needed to be done.

Please be aware that this solution works as we use it ourselves. To become effective, the user would need to logoff and on again - maybe you missed that? But never mind.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.

Using your suggestion on the server in question I had no option to modify the local security settings because this server is on a domain. Also the appropriate user group was already added. The add user or group or remove option was greyed out.

User not only logged out they also rebooted and no change.