Re: removing shutdown command

From: Vera Noest [MVP] (vera.noest_at_remove-this.hem.utfors.se)
Date: 01/22/05

  • Next message: Vera Noest [MVP]: "Re: faulting applications and disconnections" 
    Date: Sat, 22 Jan 2005 12:15:30 -0800

    But chances are, if normal users are Administrators, they will be
    able to change the policy back again.
    And now we are only talking about using the shutdown command....
    There is *no* defence against Administrators.

     --
    Vera Noest
    MCSE, CCEA, Microsoft MVP - Terminal Server
    http://hem.fyristorg.com/vera/IT
     --- please respond in newsgroup, NOT by private email ---

    "mculver@wagenfeldlevine.com.nospam" <mculver@wagenfeldlevine.com>
    wrote on 22 jan 2005 in microsoft.public.win2000.termserv.clients:

    > Not true. If you really want to restrict the access to shut
    > down the system, open up the group policy object that is
    > assigned to the server. Under Computer Configuration, Windows
    > Settings, Security Settings, Local Policies, and User Rights
    > Assignment, you will see a setting to "Shut Down the Server".
    > You can grant/revoke the privilege, there.

  • Next message: Vera Noest [MVP]: "Re: faulting applications and disconnections"

    Relevant Pages

    • Re: administrator locked out of SBS 2003
      ... Restriction Policies node and select New Software Restriction Policy ... Select "All users except local administrators" ... This is a known issue when installing VMware server 2.0, ... the installation kept ...
      (microsoft.public.windows.server.sbs)
    • Re: terminal Services Policies not working
      ... more options for group policy. ... > We are trying to set up 2 sets of users (as well as the Administrators) ... > We then are trying to set up the Policies from the Group Policy Object ... This is where all the policies for Terminal Server seem to be. ...
      (microsoft.public.windows.terminal_services)
    • Re: Todays Quote
      ... this is very clearly a case of a mistaken policy." ... The purpose of my Faith, the Baha'i Faith, is not to gain more members, as ... hath befallen the Cause of God. ... is a Baha'i teaching that whatever it is the administrators of Baha'i ...
      (talk.religion.bahai)
    • Re: administrator locked out of SBS 2003
      ... The Domain Admins group was a member of ... included in the "Deny log on locally" local security policy settings. ... Select "All users except local administrators" ... That allowed the installation of VMware server to complete. ...
      (microsoft.public.windows.server.sbs)
    • Re: Restricted Groups not taking effect right away
      ... Enable UserEnv.Log logging of policies and profiles (This policy enables ... We're trying to remove local administrator rights from machines, ... I created a GPO that adds the "NL7Pilot" group as a member of the Local ... Administrators group through Restricted Groups, ...
      (microsoft.public.win2000.group_policy)