RE: How do I disable shutdown on Terminal Server.
From: Patrick Rouse [MVP] (anonymous_at_discussions.microsoft.com)
Date: 05/05/04
- Next message: Patrick Rouse [MVP]: "RE: new users cannot logon to Terminal Server through thin client"
- Previous message: Lee: "How do I disable shutdown on Terminal Server."
- In reply to: Lee: "How do I disable shutdown on Terminal Server."
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 5 May 2004 06:56:02 -0700
Only administrators should have the "Shut down the system" right, which is set in the local security policy, or Group Policy. Remove the user from the Administrators group and they won't be able to shut down the machine.
There are cosmetic changes you can make to hide the shut down selection from the start menu & task manager (via Group Policy), but these won't stop a crafty person from restarting the server via software installation that asks to reboot or via cmd prompt like tsshutdn or shutdown.
If you've assigned the users to the administrators group to run an application, use filemon & regmon to determine what regstry keys or file system objects a normal user needs permission to so you don't have to elevate their system-wide priviliges.
http://www.workthin.com/tsdown.htm
Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com
----- Lee wrote: -----
I have granted access to an accounting application for or remote users thru Terminal server but anyone of these can shutdown the server. I would like to disable this so that only the administrator can do this from our Head Office.
Please help.
- Next message: Patrick Rouse [MVP]: "RE: new users cannot logon to Terminal Server through thin client"
- Previous message: Lee: "How do I disable shutdown on Terminal Server."
- In reply to: Lee: "How do I disable shutdown on Terminal Server."
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
