Guest JT Posted July 19, 2007 Posted July 19, 2007 Is it possible, using GPO's, to restrict users from shutting down their workstation but allow them to restart? It seems you can only restrict shutdown and that removes the restart command as well. We want to prevent users from shutting down at night. Countless emails and warnings and people still shut down their systems. But we want the option to allow them to restart in case they are asked by our department through the day without requiring a user excluded from the policy in having to do so. Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native AD environment. Thanks
Guest Greg O Posted July 19, 2007 Posted July 19, 2007 Re: Restrict Shutdown? "JT" <no@mail.here> wrote in message news:%23KwHLzfyHHA.5980@TK2MSFTNGP04.phx.gbl... > Is it possible, using GPO's, to restrict users from shutting down their > workstation but allow them to restart? It seems you can only restrict > shutdown and that removes the restart command as well. We want to prevent > users from shutting down at night. Countless emails and warnings and > people still shut down their systems. But we want the option to allow them > to restart in case they are asked by our department through the day > without requiring a user excluded from the policy in having to do so. > > Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native > AD environment. > > Thanks > There is a setting in group policy: User configuration/administrative templates/start menu and taskbar/ Prevents users from shutting down or restarting Windows. This setting removes the Shut Down option from the Start menu and disables the Shut Down button on the Windows Security dialog box, which appears when you press CTRL+ALT+DEL. This setting prevents users from using the Windows user interface to shut down the system, although it does not prevent them from running programs that shut down Windows. If you disable this setting or do not configure it, the Shut Down menu option appears, and the Shut Down button is enabled. Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.
Guest Dragos CAMARA Posted July 19, 2007 Posted July 19, 2007 RE: Restrict Shutdown? hi, basics for OS it's the same thing restart or shutdown so isn't possible. but you can cut the rights to shutdown and the admin to use the shutdown command to restart computers. another ideea is to cut the right to shutdown the system and on security settings - allow system to be shutdown without having to logon to enable and users have to logoff and then push the shutdown the system - but it will have and the rights to shutdown the system. -- Dragos CAMARA MCSA Windows 2003 server "JT" wrote: > Is it possible, using GPO's, to restrict users from shutting down their > workstation but allow them to restart? It seems you can only restrict > shutdown and that removes the restart command as well. We want to prevent > users from shutting down at night. Countless emails and warnings and people > still shut down their systems. But we want the option to allow them to > restart in case they are asked by our department through the day without > requiring a user excluded from the policy in having to do so. > > Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native AD > environment. > > Thanks > > >
Guest JT Posted July 19, 2007 Posted July 19, 2007 Re: Restrict Shutdown? Ahhh...Okay thats a fair enough workaround. What I have been forced to do is create a restrive workstation group and drop the users that dont adhere continually and decide to shutoff into that group which i dont care for. your suggestion should work. i never thought about that one. Thanks "Dragos CAMARA" <dragos_c@remove-this.hotmail.com> wrote in message news:DF253C6F-4ED6-4C88-9BB2-54110A69C324@microsoft.com... > hi, > basics for OS it's the same thing restart or shutdown so isn't possible. > but > you can cut the rights to shutdown and the admin to use the shutdown > command > to restart computers. > > another ideea is to cut the right to shutdown the system and on security > settings - allow system to be shutdown without having to logon to enable > and > users have to logoff and then push the shutdown the system - but it will > have > and the rights to shutdown the system. > > -- > Dragos CAMARA > MCSA Windows 2003 server > > > "JT" wrote: > >> Is it possible, using GPO's, to restrict users from shutting down their >> workstation but allow them to restart? It seems you can only restrict >> shutdown and that removes the restart command as well. We want to prevent >> users from shutting down at night. Countless emails and warnings and >> people >> still shut down their systems. But we want the option to allow them to >> restart in case they are asked by our department through the day without >> requiring a user excluded from the policy in having to do so. >> >> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native >> AD >> environment. >> >> Thanks >> >> >>
Guest JT Posted July 19, 2007 Posted July 19, 2007 Re: Restrict Shutdown? Thanks Greg O. I was aware of that one and have tested it, my gripe was as mentioned, also losing the ability the restart. I guess you are limited regardless if windows sees both commands pretty much the same. I am going to try Dragos suggestion and apply the shutdown without having to login policy. Thanks for the suggestions "Greg O" <none@all.com> wrote in message news:OMGjrEgyHHA.1208@TK2MSFTNGP03.phx.gbl... > > "JT" <no@mail.here> wrote in message > news:%23KwHLzfyHHA.5980@TK2MSFTNGP04.phx.gbl... >> Is it possible, using GPO's, to restrict users from shutting down their >> workstation but allow them to restart? It seems you can only restrict >> shutdown and that removes the restart command as well. We want to prevent >> users from shutting down at night. Countless emails and warnings and >> people still shut down their systems. But we want the option to allow >> them to restart in case they are asked by our department through the day >> without requiring a user excluded from the policy in having to do so. >> >> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native >> AD environment. >> >> Thanks >> > > There is a setting in group policy: > > User configuration/administrative templates/start menu and taskbar/ > > Prevents users from shutting down or restarting Windows. > > This setting removes the Shut Down option from the Start menu and disables > the Shut Down button on the Windows Security dialog box, which appears > when you press CTRL+ALT+DEL. > > This setting prevents users from using the Windows user interface to shut > down the system, although it does not prevent them from running programs > that shut down Windows. > > If you disable this setting or do not configure it, the Shut Down menu > option appears, and the Shut Down button is enabled. > > Note: It is a requirement for third-party applications with Windows 2000 > or later certification to adhere to this setting. >
Guest Dragos CAMARA Posted July 19, 2007 Posted July 19, 2007 Re: Restrict Shutdown? you are welcome. -- Dragos CAMARA MCSA Windows 2003 server "JT" wrote: > Ahhh...Okay thats a fair enough workaround. What I have been forced to do is > create a restrive workstation group and drop the users that dont adhere > continually and decide to shutoff into that group which i dont care for. > your suggestion should work. i never thought about that one. > > Thanks > > > "Dragos CAMARA" <dragos_c@remove-this.hotmail.com> wrote in message > news:DF253C6F-4ED6-4C88-9BB2-54110A69C324@microsoft.com... > > hi, > > basics for OS it's the same thing restart or shutdown so isn't possible. > > but > > you can cut the rights to shutdown and the admin to use the shutdown > > command > > to restart computers. > > > > another ideea is to cut the right to shutdown the system and on security > > settings - allow system to be shutdown without having to logon to enable > > and > > users have to logoff and then push the shutdown the system - but it will > > have > > and the rights to shutdown the system. > > > > -- > > Dragos CAMARA > > MCSA Windows 2003 server > > > > > > "JT" wrote: > > > >> Is it possible, using GPO's, to restrict users from shutting down their > >> workstation but allow them to restart? It seems you can only restrict > >> shutdown and that removes the restart command as well. We want to prevent > >> users from shutting down at night. Countless emails and warnings and > >> people > >> still shut down their systems. But we want the option to allow them to > >> restart in case they are asked by our department through the day without > >> requiring a user excluded from the policy in having to do so. > >> > >> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native > >> AD > >> environment. > >> > >> Thanks > >> > >> > >> > > >
Recommended Posts