Solved

GPO Setting remove shutdown for users but not administrators

Posted on 2014-12-29
2
136 Views
Last Modified: 2014-12-29
I want to remove the shutdown and restart on terminal Server 2012 for all users except Administrators. I know where the remove and prevent access to shut down is but I need to make sure it does not effect administrators.

I do have the loop back policy enabled.
0
Comment
Question by:ajdratch
2 Comments
 
LVL 9

Accepted Solution

by:
Sean earned 500 total points
ID: 40521902
You have found the correct setting but what you are forgetting is the scope. If you create a GPO called no shutdown and the scope is everyone but the administrators then the administrators will still be able to shutdown the servers but everyone else will not. So in scope remove the authenticated users and add the group of users you want to prevent from shutting down the server. You can even create an AD group called no shutdown and put everyone but administrators in there and add that to the scope.
0
 

Author Closing Comment

by:ajdratch
ID: 40521971
Thanks, Evidently a weeks vacation has caused memory problems.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Table of Contents: Lesson 1 - Installing Windows Server 2012 (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2012/A_11592-Become-an-Administrator-Installing-Windows-Server-2012.html) Lesson 2 - Configuring Ser…
I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question