Re: sbs 2k3 - prevent shutdown fron login screen

good morning

thank you for your help. its solved now.

have a nice day

PLeite
-----------------------------------------------------------
""Jenny wu [MSFT]"" <v-yanniw@xxxxxxxxxxxxxxxxxxxx> escreveu na mensagem
news:qr2NfH2mGHA.5268@xxxxxxxxxxxxxxxxxxxxxxxx
Hi Pedro,

Thanks for posting here.

From your description, I understand that you want to prevent user shutdown
the server when user logs on to the SBS 2003 server. If I am off-base on
that, please let me know.

Based on my research, we can enable the Loopback Policy option to
accomplish your goal.

As we know, Group Policy applies to the user or computer in a manner that
depends on where both the user and the computer objects are located in
Active Directory. However, in some cases, users may need policy applied to
them based on the location of the computer object alone. You can use the
Group Policy loopback feature to apply Group Policy Objects (GPOs) that
depend only on which computer the user logs on to. For your convenience,
I''ve composed an action plan for your reference:

1. Open Group Policy Management console (gpmc.msc), right click Group
Policy Objects to choose New item to create a group policy. Edit this
policy with the following settings:

- [Computer Configuration\Admin Templates\System\Group Policy]

Enable the following setting:

"User Group Policy loopback processing mode"

2. Go to the policy item:

[User Configuration\Administrative Templates\Start Menu & Taskbar]

3. Enable the following settings:

-"Add Logoff to Start Menu"
-"Disable and remove the Shut Down command"

4. When finished the configuration, go to Group Policy Management console,
highlight the policy and click Remove button to remove the Authentication
Users in Security Filtering region. And click Add button to add users or
groups to configure who the policy applies.

5. Then you can link the policy to the OU: Domain controllers.

If you would like to learn more about this topic, please refer to the
following Microsoft Knowledge Base article:

231287 Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287

How to apply System Policy settings to Terminal Server
http://support.microsoft.com/?id=192794

278295 How to Lock Down a Windows 2003 Terminal Server Session
http://support.microsoft.com/?id=278295

Hope above information helps. If you have further question on the issue
please let me know. I am happy to be of assistance to you and look forward
to your reply.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
From: "Pedro Leite" <naoehpreciso>
Subject: sbs 2k3 - prevent shutdown fron login screen
Date: Wed, 28 Jun 2006 12:06:41 +0100
Lines: 21
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.3790.2663
X-RFC2646: Format=Flowed; Original
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2663
Message-ID: <#QEtHLqmGHA.4032@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: mail.lan.cimbo.com 81.193.123.23
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:277920
X-Tomcat-NG: microsoft.public.windows.server.sbs

hi

i had this done before but now i'm missing the proper policy setting

some users got used to reboot the server if things seem to be going wrong
but i don't want them to.

before sp1, the option to shutdown / reboot was greyed out but now is
available

went to dc policy settings, local settings, security and set the shutdown,
allow the sistem to be shutdown withou logging in, to disable but its
still
possible.

what else can i check to make sure the shutdown option is not available

Thank You

Pedro Leite From Portugal






.