• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 154
  • Last Modified:

GPO Setting remove shutdown for users but not administrators

I want to remove the shutdown and restart on terminal Server 2012 for all users except Administrators. I know where the remove and prevent access to shut down is but I need to make sure it does not effect administrators.

I do have the loop back policy enabled.
1 Solution
SeanSystem EngineerCommented:
You have found the correct setting but what you are forgetting is the scope. If you create a GPO called no shutdown and the scope is everyone but the administrators then the administrators will still be able to shutdown the servers but everyone else will not. So in scope remove the authenticated users and add the group of users you want to prevent from shutting down the server. You can even create an AD group called no shutdown and put everyone but administrators in there and add that to the scope.
ajdratchAuthor Commented:
Thanks, Evidently a weeks vacation has caused memory problems.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now