Solved

GPO Setting remove shutdown for users but not administrators

Posted on 2014-12-29
2
146 Views
Last Modified: 2014-12-29
I want to remove the shutdown and restart on terminal Server 2012 for all users except Administrators. I know where the remove and prevent access to shut down is but I need to make sure it does not effect administrators.

I do have the loop back policy enabled.
0
Comment
Question by:ajdratch
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 9

Accepted Solution

by:
Sean earned 500 total points
ID: 40521902
You have found the correct setting but what you are forgetting is the scope. If you create a GPO called no shutdown and the scope is everyone but the administrators then the administrators will still be able to shutdown the servers but everyone else will not. So in scope remove the authenticated users and add the group of users you want to prevent from shutting down the server. You can even create an AD group called no shutdown and put everyone but administrators in there and add that to the scope.
0
 

Author Closing Comment

by:ajdratch
ID: 40521971
Thanks, Evidently a weeks vacation has caused memory problems.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will review the basic installation and configuration for Windows Software Update Services (WSUS) in a Windows 2012 R2 environment.  WSUS is a Microsoft tool that allows administrators to manage and control updates to be approved and ins…
I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question