RE: how do I prevent power user from shutting down or rebooting a

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I didn't mention anything about user profiles, just that it's possible to use
QB without users having to be members of the Power Users Group. I also
mentioned that you can remove the power users group from the "Shut down the
system" right in the local security policy, or via GPO.

Power users get access to all kinds of things, so this is NOT a good solution.
--
Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com


"dabbuhl1" wrote:

> I tried to setup a user under the "user" and "mobil" profile but I can not
> log into the terminal server with that user setting. How do I go about
> taking away the right to shut down or reboot from the "power user" group? I
> only want them to access the Quick Books program, nothing else. How can I
> allow a user to log into the terminal server and only allow them access to QB?
>
> "Patrick Rouse" wrote:
>
> > I believe it's possible to run QB without being a power user. Check the
> > following info in Vera Noest's Site:
> >
> > http://ts.veranoest.net/ts_apps_qb.htm
> >
> > You can remove the power users group from the "Shut down the system" right,
> > via Group Policy or local security policy, however removing users from the
> > power users group is the best solution, because power users can do workse
> > things to your server than shut it off.
> >
> >
> > --
> > Patrick Rouse
> > Microsoft MVP - Terminal Server
> > http://www.workthin.com
> >
> >
> > "dabbuhl1" wrote:
> >
> > > I am running Windows Server 2003 with terminal services. I use this to allow
> > > users to run Quick Books from our remote stores. This allows our 4 stores to
> > > access inventory and post payments from any of our retail stores easily. The
> > > problem is, everyone that connects via terminal services has to be a power
> > > user to access the Quick books program. I have tested this out of curiosity
> > > and forsee a problem down the line. Any user that logs in can reboot or shut
> > > down the server. How do I prevent or disallow this?
> > >
> > >
.

Relevant Pages

  • Re: Allow user to run application as a power user
    ... > the system context that makes the current logged on user a member of the ... > Finally, after the application is complete, the script, under the system ... > Since we don't normally allow membership in the power users group, ...
    (microsoft.public.scripting.vbscript)
  • Re: All users printers showing up on terminal server
    ... This is not the case for you since your application will run okay with Power Users membership. ... A member of the Power Users group may be able to gain administrator rights and permissions in Windows Server 2003, Windows 2000, or Windows XP ... When the users log onto TS all the redirected printers are show on the ...
    (microsoft.public.windows.terminal_services)
  • RE: Power Users change?
    ... the rights and permissions that are granted to the Power Users ... members of the Power Users group to modify computer-wide settings, ... install drivers, and to run non-certified programs. ...
    (microsoft.public.windows.server.migration)
  • Re: Local Computer Access In AD
    ... Not if you use the Restricted Group through a GPO method ... You can put "interactive" in the Power Users this ... You need to first catalogue what specific privileges ... Add the user to the Power Users group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Computer Access In AD
    ... You need to first catalogue what specific privileges ... users can install their own programs. ... Add the user to the Power Users group. ...
    (microsoft.public.windows.server.active_directory)