Solved

GPO Setting remove shutdown for users but not administrators

Posted on 2014-12-29
2
138 Views
Last Modified: 2014-12-29
I want to remove the shutdown and restart on terminal Server 2012 for all users except Administrators. I know where the remove and prevent access to shut down is but I need to make sure it does not effect administrators.

I do have the loop back policy enabled.
0
Comment
Question by:ajdratch
2 Comments
 
LVL 9

Accepted Solution

by:
Sean earned 500 total points
ID: 40521902
You have found the correct setting but what you are forgetting is the scope. If you create a GPO called no shutdown and the scope is everyone but the administrators then the administrators will still be able to shutdown the servers but everyone else will not. So in scope remove the authenticated users and add the group of users you want to prevent from shutting down the server. You can even create an AD group called no shutdown and put everyone but administrators in there and add that to the scope.
0
 

Author Closing Comment

by:ajdratch
ID: 40521971
Thanks, Evidently a weeks vacation has caused memory problems.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Table of Contents: Lesson 1 - Installing Windows Server 2012 (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2012/A_11592-Become-an-Administrator-Installing-Windows-Server-2012.html) Lesson 2 - Configuring Ser…
The reason that corporations and businesses use Windows servers is because it supports custom modifications to adapt to the business and what it needs. Most individual users won’t need such powerful options. Here I’ll explain how you can enable Wind…
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question