Restricting users from shutting off server

Hi, on 2 occasions one of the users in our west coast office has tried restarting the Remote Desktop server in east coast office but accidentally selects option to shut it down instead of restarting so server remains off rest of the evening. Is there a way to block these users from being able to do this? Thanks
dankyle67Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
What server OS?
on Win2k member servers: users may do it.
2003 member servers: power users may do it
2008 and higher member servers: only admins and backup operators may shut those down
On Domain controllers: no matter what OS, only admins may shut it down.

Or are your users admins?
0
Gary DewrellSenior Network AdministratorCommented:
You can do it with Group Policy. In the GPO, navigate to: User Config > Policies > Admin Templates > Start Menu > Remove and prevent access to the Shut Down, Restart, Sleep and Hibernate Commands.
0
dankyle67Author Commented:
this is on windows 2012 so as long as they are not domain admins then they cannot perform a shutdown of the server?  I will double check and will also take a look at restricting them using the advised gpo steps.
0
Get Certified for a Job in Cybersecurity

Want an exciting career in an emerging field? Earn your MS in Cybersecurity and get certified in ethical hacking or computer forensic investigation. WGU’s MSCSIA degree program was designed to meet the most recent U.S. Department of Homeland Security (DHS) and NSA guidelines.  

dankyle67Author Commented:
Also. on 2012 server i was trying to use gpmc.msc to access gpo but didnt come up so is this correct or is there another way to access gpo
0
Gary DewrellSenior Network AdministratorCommented:
This GPO setting is available on a 2012 server.
Logon to server.
Start Server Manager
Click on Tools
Click on Group Policy Management.
Either create a new GPO or modify an existing GPO. (Be careful you probably do not want to apply this to all workstations.

Use path above to set he appropriate settings.
0
dankyle67Author Commented:
I went there before and the group policy management option is not listed so is this supposed to be done on one of the domain controllers?  The 2012 server i was trying to look for it on is a remote desktop server.
0
McKnifeCommented:
" so as long as they are not domain admins then they cannot perform a shutdown of the server? " - As long as they are not admins on that server, they cannot shut it down.
0
Gary DewrellSenior Network AdministratorCommented:
Ah, yes, those instructions are for doing it on a DC with Group Policy.
If you want to do it on a single server you can.
Just click on the windows Icon and type Local Group Policy Editor.
Then follow the instructions above.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dankyle67Author Commented:
I wasnt sure which windows logo you meant so i just went to run box and typed gpedit.msc and when i selected admin templates i didnt see start menu option but there was start menu and taskbar line but this doesnt have what you described.
0
dankyle67Author Commented:
Actually i found it
0
dankyle67Author Commented:
Ok i enabled the restriction so was wondering if i log in as domain admin on that server, will i also not be able to see the power button or does it only affect non domain admin users?
0
McKnifeCommented:
It is for all users that this policy applies to. Why even use it? Are your users admins? If not, they cannot shutdown the server. If they are admins however, no restriction will keep them from undoing it.
0
dankyle67Author Commented:
One of the users is a domain admin but i plan on removing him from that group so then nobody should be able to shut down server by accident.  Thanks for all the help
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Security

From novice to tech pro — start learning today.