Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Windows 2008R2 Terminal Services Server - Logoff vs shutdown

Posted on 2014-10-15
3
Medium Priority
?
320 Views
Last Modified: 2014-10-16
This is a two-fold question.   Our Windows 2008R2 Terminal Server was shutdown remotely yesterday.  I need to know how to remove the "shut down" option from the dropdown menu that is adjecent to the <Logoff> button while in a RDP session.  In other words, I believe one my remote users clicked the small down arrow next to the <Log Off> button which displayed a dropdown menu and they selected "Shut Down"...I need to know how to eliminate the "shut down" option from the dropdown menu.

And secondly, is there an easy way either via the logs or some other fashion to determine which user shut down the TS Server?

Thank you in advance for your reply...I appreciate any comments.
0
Comment
Question by:infosys3
3 Comments
 
LVL 13

Assisted Solution

by:akb
akb earned 1000 total points
ID: 40383601
By default regular users do not have a Shutdown option in RDP. I suspect the are in the Administrator group where they could do a lot of damage.
I'm not sure about the logs. You should have a look in Event Viewer at the logs immediately prior to the shutdown.
0
 
LVL 7

Accepted Solution

by:
Stampel earned 1000 total points
ID: 40383850
In the windows eventviewer you can find this in the log security and stuff.
(Launch it with command "eventvwr" from start menu)
In the system log you will see if the shutdown was regular (by a user) or forced (power issue / hang ..). You will have to look arround the datetime of the reboot.
Looking at the file "pagefile.sys" you can find the datetime of this reboot easily.
0
 

Author Closing Comment

by:infosys3
ID: 40384966
Thank you gentlemen for your timely response.  As it turned out MS automatic security updates which happened at 3:30am required a reboot.  Unknowningly, I immediately took this situation as user issue.  I am splitting the 500 points between the both of you.

akb:  I have checked all user accounts and I have a handle on who in in the administrator group.  Thanks.

Stampel:  After searching diligently in the event viewer I found an event where a restart is required to complete the installation of the updates.

Thank you both again for your help.  I appreciate it.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OfficeMate Freezes on login or does not load after login credentials are input.
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …

927 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question