Solved

Restricting users from shutting off server

Posted on 2016-09-23
13
43 Views
Last Modified: 2016-09-23
Hi, on 2 occasions one of the users in our west coast office has tried restarting the Remote Desktop server in east coast office but accidentally selects option to shut it down instead of restarting so server remains off rest of the evening. Is there a way to block these users from being able to do this? Thanks
0
Comment
Question by:dankyle67
  • 7
  • 3
  • 3
13 Comments
 
LVL 53

Expert Comment

by:McKnife
ID: 41812378
What server OS?
on Win2k member servers: users may do it.
2003 member servers: power users may do it
2008 and higher member servers: only admins and backup operators may shut those down
On Domain controllers: no matter what OS, only admins may shut it down.

Or are your users admins?
0
 
LVL 12

Expert Comment

by:Gary Dewrell
ID: 41812380
You can do it with Group Policy. In the GPO, navigate to: User Config > Policies > Admin Templates > Start Menu > Remove and prevent access to the Shut Down, Restart, Sleep and Hibernate Commands.
0
 

Author Comment

by:dankyle67
ID: 41812416
this is on windows 2012 so as long as they are not domain admins then they cannot perform a shutdown of the server?  I will double check and will also take a look at restricting them using the advised gpo steps.
0
 

Author Comment

by:dankyle67
ID: 41812434
Also. on 2012 server i was trying to use gpmc.msc to access gpo but didnt come up so is this correct or is there another way to access gpo
0
 
LVL 12

Expert Comment

by:Gary Dewrell
ID: 41812443
This GPO setting is available on a 2012 server.
Logon to server.
Start Server Manager
Click on Tools
Click on Group Policy Management.
Either create a new GPO or modify an existing GPO. (Be careful you probably do not want to apply this to all workstations.

Use path above to set he appropriate settings.
0
 

Author Comment

by:dankyle67
ID: 41812464
I went there before and the group policy management option is not listed so is this supposed to be done on one of the domain controllers?  The 2012 server i was trying to look for it on is a remote desktop server.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 53

Expert Comment

by:McKnife
ID: 41812469
" so as long as they are not domain admins then they cannot perform a shutdown of the server? " - As long as they are not admins on that server, they cannot shut it down.
0
 
LVL 12

Accepted Solution

by:
Gary Dewrell earned 250 total points
ID: 41812473
Ah, yes, those instructions are for doing it on a DC with Group Policy.
If you want to do it on a single server you can.
Just click on the windows Icon and type Local Group Policy Editor.
Then follow the instructions above.
0
 

Author Comment

by:dankyle67
ID: 41812499
I wasnt sure which windows logo you meant so i just went to run box and typed gpedit.msc and when i selected admin templates i didnt see start menu option but there was start menu and taskbar line but this doesnt have what you described.
0
 

Author Comment

by:dankyle67
ID: 41812504
Actually i found it
0
 

Author Comment

by:dankyle67
ID: 41812535
Ok i enabled the restriction so was wondering if i log in as domain admin on that server, will i also not be able to see the power button or does it only affect non domain admin users?
0
 
LVL 53

Assisted Solution

by:McKnife
McKnife earned 250 total points
ID: 41812546
It is for all users that this policy applies to. Why even use it? Are your users admins? If not, they cannot shutdown the server. If they are admins however, no restriction will keep them from undoing it.
0
 

Author Comment

by:dankyle67
ID: 41812559
One of the users is a domain admin but i plan on removing him from that group so then nobody should be able to shut down server by accident.  Thanks for all the help
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Windows 10 Updates - Best Practice 16 121
Login to computer through Admin Priviligies 9 88
Mac-address sticky 12 46
slow vpn connection 9 41
The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now