Restrict Shutdown?

[Guest JT]

Is it possible, using GPO's, to restrict users from shutting down their

workstation but allow them to restart? It seems you can only restrict

shutdown and that removes the restart command as well. We want to prevent

users from shutting down at night. Countless emails and warnings and people

still shut down their systems. But we want the option to allow them to

restart in case they are asked by our department through the day without

requiring a user excluded from the policy in having to do so.

 

Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native AD

environment.

 

Thanks

[Guest Greg O]

Re: Restrict Shutdown?

 

 

"JT" <no@mail.here> wrote in message

news:%23KwHLzfyHHA.5980@TK2MSFTNGP04.phx.gbl...

> Is it possible, using GPO's, to restrict users from shutting down their

> workstation but allow them to restart? It seems you can only restrict

> shutdown and that removes the restart command as well. We want to prevent

> users from shutting down at night. Countless emails and warnings and

> people still shut down their systems. But we want the option to allow them

> to restart in case they are asked by our department through the day

> without requiring a user excluded from the policy in having to do so.

>

> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native

> AD environment.

>

> Thanks

>

 

There is a setting in group policy:

 

User configuration/administrative templates/start menu and taskbar/

 

Prevents users from shutting down or restarting Windows.

 

This setting removes the Shut Down option from the Start menu and disables

the Shut Down button on the Windows Security dialog box, which appears when

you press CTRL+ALT+DEL.

 

This setting prevents users from using the Windows user interface to shut

down the system, although it does not prevent them from running programs

that shut down Windows.

 

If you disable this setting or do not configure it, the Shut Down menu

option appears, and the Shut Down button is enabled.

 

Note: It is a requirement for third-party applications with Windows 2000 or

later certification to adhere to this setting.

[Guest Dragos CAMARA]

RE: Restrict Shutdown?

 

hi,

basics for OS it's the same thing restart or shutdown so isn't possible. but

you can cut the rights to shutdown and the admin to use the shutdown command

to restart computers.

 

another ideea is to cut the right to shutdown the system and on security

settings - allow system to be shutdown without having to logon to enable and

users have to logoff and then push the shutdown the system - but it will have

and the rights to shutdown the system.

 

--

Dragos CAMARA

MCSA Windows 2003 server

 

 

"JT" wrote:

> Is it possible, using GPO's, to restrict users from shutting down their

> workstation but allow them to restart? It seems you can only restrict

> shutdown and that removes the restart command as well. We want to prevent

> users from shutting down at night. Countless emails and warnings and people

> still shut down their systems. But we want the option to allow them to

> restart in case they are asked by our department through the day without

> requiring a user excluded from the policy in having to do so.

>

> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native AD

> environment.

>

> Thanks

>

>

>

[Guest JT]

Re: Restrict Shutdown?

 

Ahhh...Okay thats a fair enough workaround. What I have been forced to do is

create a restrive workstation group and drop the users that dont adhere

continually and decide to shutoff into that group which i dont care for.

your suggestion should work. i never thought about that one.

 

Thanks

 

 

"Dragos CAMARA" <dragos_c@remove-this.hotmail.com> wrote in message

news:DF253C6F-4ED6-4C88-9BB2-54110A69C324@microsoft.com...

> hi,

> basics for OS it's the same thing restart or shutdown so isn't possible.

> but

> you can cut the rights to shutdown and the admin to use the shutdown

> command

> to restart computers.

>

> another ideea is to cut the right to shutdown the system and on security

> settings - allow system to be shutdown without having to logon to enable

> and

> users have to logoff and then push the shutdown the system - but it will

> have

> and the rights to shutdown the system.

>

> --

> Dragos CAMARA

> MCSA Windows 2003 server

>

>

> "JT" wrote:

>

>> Is it possible, using GPO's, to restrict users from shutting down their

>> workstation but allow them to restart? It seems you can only restrict

>> shutdown and that removes the restart command as well. We want to prevent

>> users from shutting down at night. Countless emails and warnings and

>> people

>> still shut down their systems. But we want the option to allow them to

>> restart in case they are asked by our department through the day without

>> requiring a user excluded from the policy in having to do so.

>>

>> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native

>> AD

>> environment.

>>

>> Thanks

>>

>>

>>

[Guest JT]

Re: Restrict Shutdown?

 

Thanks Greg O. I was aware of that one and have tested it, my gripe was as

mentioned, also losing the ability the restart. I guess you are limited

regardless if windows sees both commands pretty much the same. I am going to

try Dragos suggestion and apply the shutdown without having to login policy.

 

Thanks for the suggestions

 

"Greg O" <none@all.com> wrote in message

news:OMGjrEgyHHA.1208@TK2MSFTNGP03.phx.gbl...

>

> "JT" <no@mail.here> wrote in message

> news:%23KwHLzfyHHA.5980@TK2MSFTNGP04.phx.gbl...

>> Is it possible, using GPO's, to restrict users from shutting down their

>> workstation but allow them to restart? It seems you can only restrict

>> shutdown and that removes the restart command as well. We want to prevent

>> users from shutting down at night. Countless emails and warnings and

>> people still shut down their systems. But we want the option to allow

>> them to restart in case they are asked by our department through the day

>> without requiring a user excluded from the policy in having to do so.

>>

>> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native

>> AD environment.

>>

>> Thanks

>>

>

> There is a setting in group policy:

>

> User configuration/administrative templates/start menu and taskbar/

>

> Prevents users from shutting down or restarting Windows.

>

> This setting removes the Shut Down option from the Start menu and disables

> the Shut Down button on the Windows Security dialog box, which appears

> when you press CTRL+ALT+DEL.

>

> This setting prevents users from using the Windows user interface to shut

> down the system, although it does not prevent them from running programs

> that shut down Windows.

>

> If you disable this setting or do not configure it, the Shut Down menu

> option appears, and the Shut Down button is enabled.

>

> Note: It is a requirement for third-party applications with Windows 2000

> or later certification to adhere to this setting.

>

[Guest Dragos CAMARA]

Re: Restrict Shutdown?

 

you are welcome.

--

Dragos CAMARA

MCSA Windows 2003 server

 

 

"JT" wrote:

> Ahhh...Okay thats a fair enough workaround. What I have been forced to do is

> create a restrive workstation group and drop the users that dont adhere

> continually and decide to shutoff into that group which i dont care for.

> your suggestion should work. i never thought about that one.

>

> Thanks

>

>

> "Dragos CAMARA" <dragos_c@remove-this.hotmail.com> wrote in message

> news:DF253C6F-4ED6-4C88-9BB2-54110A69C324@microsoft.com...

> > hi,

> > basics for OS it's the same thing restart or shutdown so isn't possible.

> > but

> > you can cut the rights to shutdown and the admin to use the shutdown

> > command

> > to restart computers.

> >

> > another ideea is to cut the right to shutdown the system and on security

> > settings - allow system to be shutdown without having to logon to enable

> > and

> > users have to logoff and then push the shutdown the system - but it will

> > have

> > and the rights to shutdown the system.

> >

> > --

> > Dragos CAMARA

> > MCSA Windows 2003 server

> >

> >

> > "JT" wrote:

> >

> >> Is it possible, using GPO's, to restrict users from shutting down their

> >> workstation but allow them to restart? It seems you can only restrict

> >> shutdown and that removes the restart command as well. We want to prevent

> >> users from shutting down at night. Countless emails and warnings and

> >> people

> >> still shut down their systems. But we want the option to allow them to

> >> restart in case they are asked by our department through the day without

> >> requiring a user excluded from the policy in having to do so.

> >>

> >> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native

> >> AD

> >> environment.

> >>

> >> Thanks

> >>

> >>

> >>

>

>

>