Re: win2k3 server shutdown

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi Janice,

You should never ever do that in the default domain policies. If you want to
create a policy, create a new policy and test it first. Check this out:

Understanding GPO's for dummies:
http://www.smallbizserver.net/Default.aspx?tabid=145

To put the default policies back to its original, you will have to use
dcgpofix.

--
Regards,

Marina
Microsoft SBS-MVP
One of the Magical M&M's

"janice" <janice@xxxxxxxxxxxxxxxxxxxxxxxxx> schreef in bericht
news:A2B64C87-889F-407B-AEBF-15D27D76B528@xxxxxxxxxxxxxxxx
> I made change in: Admin Tools => Domain Security Policy => Local Policies
=>
> User Rights Assignments => Shutdown the system
>
> When that didn't work, I got desparate and also changed: ditto to DC
> Security Policy
>
> How bad is it? Do I have to re-install the OS? Seems like I lost admin
> priviledges?
> Thanks
>
> "Marina Roos [SBS-MVP]" wrote:
>
> > Hi Janice,
> >
> > In which policy did you make the changes?
> >
> > --
> > Regards,
> >
> > Marina
> > Microsoft SBS-MVP
> > One of the Magical M&M's
> >
> > "janice" <janice@xxxxxxxxxxxxxxxxxxxxxxxxx> schreef in bericht
> > news:B65146F4-2EFE-46DA-9FD1-4ECCAFA9C8B3@xxxxxxxxxxxxxxxx
> > > I have a new win2k3 server. After setup, I noticed all users had the
> > > shutdown option so I set GPO for administrator group only. Now, the
> > shutdown
> > > option doesn't display on the start menu, but administrator doesn't
have
> > the
> > > shutdown option either!
> > >
> > > I have been unsuccessful locating where to re-enable this.
> > >
> > > Any feedback is appreciated.
> > >
> > > Janice
> >
> >
> >


.

Relevant Pages

  • Re: Restricted Groups????
    ... We have used this policy to pretty good effect. ... Administrator Group, will get removed (for instance..if you don't specify ... Admins group was not specified, and so the Domain Admins was removed from all ...
    (microsoft.public.windows.server.active_directory)
  • Re: Policy Implementation
    ... That would defeat your domain policies. ... They log on with cached credentials so the domain policy is in force even ... > the network and User A's policy get implemented. ...
    (microsoft.public.win2000.group_policy)
  • Re: More user rights needed
    ... I did try to add the domain user into the administrator group at the client ... Can you give me a simple example of creating the restrict group? ... Or you can do this through a group policy by configuring Restricted Groups ...
    (microsoft.public.windows.server.general)
  • Re: Password lockout for users
    ... microsoft.public.win2000.security news group, Dave ... > If you know how to get to domain policies skip these steps ... You _must_ set Account Lockout policy at the domain level if you want it ...
    (microsoft.public.win2000.security)
  • Re: Folder redirection problem. GPO not applied.
    ... restore the default domain policy and the ... default domain controllers policy from a backup. ... If you reset the default domain policies, ... Machine extensions: not found ...
    (microsoft.public.windows.group_policy)