Re: Enable logon shutdown button



Can you please check your group policy (gpedit.msc) under User
Configuration->Administrative Templates->Start Menu and Taskbar "Remove and prevent access to the Shut Down Command" is enabled?
If your machine is joined to a domain, you may also need to check from your
domain controller "Active Directory Users and Computers"
Thanks
Soo Kuan


--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Wayne Gore" <WayneGore@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:C71B14B6-EE5F-4F94-BD43-8F9EF979AEEC@xxxxxxxxxxxxxxxx
Hi

I want to enable the "Shutdown" button on my domain controllers (don't ask
why) to a number of administrators who are not in the domain admins group.
The will connect to the server using Terminal Sevices.

I have altered the Domain Controller GPO with the following settings:

Computer configuration\Windows Settings\Local Policies\Security
Option\Shutdown: Allow system to be shut down without having to log on =
ENABLED

Computer configuration\Windows Settings\Local Policies\User Rights
Assigment\Shut down the system = Here I added the user accounts in question.

The problem is that these settings only enables the "Shutdown" button for
the console (however not if you connect with TS /Console) but not for a
Terminal Server Session.

I also tried to edit the registry by changing the following value to "1":

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\ShutdownWithoutLogon

That didn't help either.

Any ideas?

Regards
Wayne

.



Relevant Pages

  • Re: GPO Password length not working
    ... The errors running RSOP in logging mode on the XP Pro computers could be ... Configure some settings for both user and computer ... You mention that you are using Group Policy filtering by using groups other ... >> domain container and that the default domain controller Group Policy is ...
    (microsoft.public.windows.server.security)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... What may help is to define those settings to be enabled but blank for the ... on that domain controller which ideally would be the PDC fsmo. ... refreshed it's Group Policy in a while or you have conflicting versions ... the same GPO on different domain controllers. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... I created a custom ADM file for these two settings ... and imported it into the GPO under the Computer Administritative templates. ... really great expertise in Group Policy often reply to posts including ... doing a gpupdate on that domain controller which ideally would be the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Firewall and Screen Saver policies?
    ... If the domain controller has Group Policy ... i ran the rsop.msc and found that the display settings for screen saver ... where the gpo log off is located. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... than existed before I undefined them in group policy. ... What may help is to define those settings to be enabled but blank for the ... on that domain controller which ideally would be the PDC fsmo. ... the same GPO on different domain controllers. ...
    (microsoft.public.windowsxp.security_admin)