?
Solved

GPO Setting remove shutdown for users but not administrators

Posted on 2014-12-29
2
Medium Priority
?
148 Views
Last Modified: 2014-12-29
I want to remove the shutdown and restart on terminal Server 2012 for all users except Administrators. I know where the remove and prevent access to shut down is but I need to make sure it does not effect administrators.

I do have the loop back policy enabled.
0
Comment
Question by:ajdratch
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 9

Accepted Solution

by:
Sean earned 2000 total points
ID: 40521902
You have found the correct setting but what you are forgetting is the scope. If you create a GPO called no shutdown and the scope is everyone but the administrators then the administrators will still be able to shutdown the servers but everyone else will not. So in scope remove the authenticated users and add the group of users you want to prevent from shutting down the server. You can even create an AD group called no shutdown and put everyone but administrators in there and add that to the scope.
0
 

Author Closing Comment

by:ajdratch
ID: 40521971
Thanks, Evidently a weeks vacation has caused memory problems.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

My GPO's made for 2008 R2 servers were not allowing me to RDP into a new 2012 server by default.  That’s why I tried to allow RDP via Powershell, because I could log into a remote shell without further configuration. Below I will describe how I wen…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
Suggested Courses

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question