Enable logon shutdown button

[Guest Wayne Gore]

Hi

 

I want to enable the "Shutdown" button on my domain controllers (don't ask

why) to a number of administrators who are not in the domain admins group.

The will connect to the server using Terminal Sevices.

 

I have altered the Domain Controller GPO with the following settings:

 

Computer configuration\Windows Settings\Local Policies\Security

Option\Shutdown: Allow system to be shut down without having to log on =

ENABLED

 

Computer configuration\Windows Settings\Local Policies\User Rights

Assigment\Shut down the system = Here I added the user accounts in question.

 

The problem is that these settings only enables the "Shutdown" button for

the console (however not if you connect with TS /Console) but not for a

Terminal Server Session.

 

I also tried to edit the registry by changing the following value to "1":

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows

NT\CurrentVersion\Winlogon\ShutdownWithoutLogon

 

That didn't help either.

 

Any ideas?

 

Regards

Wayne

[Guest Soo Kuan Teo [MSFT]]

Re: Enable logon shutdown button

 

Can you please check your group policy (gpedit.msc) under User

Configuration->Administrative Templates->Start Menu and Taskbar "Remove and

prevent access to the Shut Down Command" is enabled?

If your machine is joined to a domain, you may also need to check from your

domain controller "Active Directory Users and Computers"

Thanks

Soo Kuan

 

 

--

This posting is provided "AS IS" with no warranties, and confers no rights.

 

"Wayne Gore" <WayneGore@discussions.microsoft.com> wrote in message

news:C71B14B6-EE5F-4F94-BD43-8F9EF979AEEC@microsoft.com...

> Hi

>

> I want to enable the "Shutdown" button on my domain controllers (don't ask

> why) to a number of administrators who are not in the domain admins group.

> The will connect to the server using Terminal Sevices.

>

> I have altered the Domain Controller GPO with the following settings:

>

> Computer configuration\Windows Settings\Local Policies\Security

> Option\Shutdown: Allow system to be shut down without having to log on =

> ENABLED

>

> Computer configuration\Windows Settings\Local Policies\User Rights

> Assigment\Shut down the system = Here I added the user accounts in

> question.

>

> The problem is that these settings only enables the "Shutdown" button for

> the console (however not if you connect with TS /Console) but not for a

> Terminal Server Session.

>

> I also tried to edit the registry by changing the following value to "1":

>

> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows

> NT\CurrentVersion\Winlogon\ShutdownWithoutLogon

>

> That didn't help either.

>

> Any ideas?

>

> Regards

> Wayne

[Guest Wayne Gore]

Re: Enable logon shutdown button

 

Hi

 

Thanks for you reply.

 

As I mentioned in my inital posting:

 

- it is on the domain controllers I want it enabled

- it is in the Terminal Server sessions in at Logon prompt that I want to

enable it.

 

Cheers

Wayne

 

"Soo Kuan Teo [MSFT]" wrote:

> Can you please check your group policy (gpedit.msc) under User

> Configuration->Administrative Templates->Start Menu and Taskbar "Remove and

> prevent access to the Shut Down Command" is enabled?

> If your machine is joined to a domain, you may also need to check from your

> domain controller "Active Directory Users and Computers"

> Thanks

> Soo Kuan

>

>

> --

> This posting is provided "AS IS" with no warranties, and confers no rights.

>

> "Wayne Gore" <WayneGore@discussions.microsoft.com> wrote in message

> news:C71B14B6-EE5F-4F94-BD43-8F9EF979AEEC@microsoft.com...

> > Hi

> >

> > I want to enable the "Shutdown" button on my domain controllers (don't ask

> > why) to a number of administrators who are not in the domain admins group.

> > The will connect to the server using Terminal Sevices.

> >

> > I have altered the Domain Controller GPO with the following settings:

> >

> > Computer configuration\Windows Settings\Local Policies\Security

> > Option\Shutdown: Allow system to be shut down without having to log on =

> > ENABLED

> >

> > Computer configuration\Windows Settings\Local Policies\User Rights

> > Assigment\Shut down the system = Here I added the user accounts in

> > question.

> >

> > The problem is that these settings only enables the "Shutdown" button for

> > the console (however not if you connect with TS /Console) but not for a

> > Terminal Server Session.

> >

> > I also tried to edit the registry by changing the following value to "1":

> >

> > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows

> > NT\CurrentVersion\Winlogon\ShutdownWithoutLogon

> >

> > That didn't help either.

> >

> > Any ideas?

> >

> > Regards

> > Wayne

>

>

[Guest Jeff Pitsch]

Re: Enable logon shutdown button

 

Did you check your group policy to confirm that it is setup correctly.

that's what he was talking about. You may have prevented shut down

through gpo which means you need to reverese for those particular users.

 

 

Wayne Gore wrote:

> Hi

>

> Thanks for you reply.

>

> As I mentioned in my inital posting:

>

> - it is on the domain controllers I want it enabled

> - it is in the Terminal Server sessions in at Logon prompt that I want to

> enable it.

>

> Cheers

> Wayne

>

> "Soo Kuan Teo [MSFT]" wrote:

>

>> Can you please check your group policy (gpedit.msc) under User

>> Configuration->Administrative Templates->Start Menu and Taskbar "Remove and

>> prevent access to the Shut Down Command" is enabled?

>> If your machine is joined to a domain, you may also need to check from your

>> domain controller "Active Directory Users and Computers"

>> Thanks

>> Soo Kuan

>>

>>

>> --

>> This posting is provided "AS IS" with no warranties, and confers no rights.

>>

>> "Wayne Gore" <WayneGore@discussions.microsoft.com> wrote in message

>> news:C71B14B6-EE5F-4F94-BD43-8F9EF979AEEC@microsoft.com...

>>> Hi

>>>

>>> I want to enable the "Shutdown" button on my domain controllers (don't ask

>>> why) to a number of administrators who are not in the domain admins group.

>>> The will connect to the server using Terminal Sevices.

>>>

>>> I have altered the Domain Controller GPO with the following settings:

>>>

>>> Computer configuration\Windows Settings\Local Policies\Security

>>> Option\Shutdown: Allow system to be shut down without having to log on =

>>> ENABLED

>>>

>>> Computer configuration\Windows Settings\Local Policies\User Rights

>>> Assigment\Shut down the system = Here I added the user accounts in

>>> question.

>>>

>>> The problem is that these settings only enables the "Shutdown" button for

>>> the console (however not if you connect with TS /Console) but not for a

>>> Terminal Server Session.

>>>

>>> I also tried to edit the registry by changing the following value to "1":

>>>

>>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows

>>> NT\CurrentVersion\Winlogon\ShutdownWithoutLogon

>>>

>>> That didn't help either.

>>>

>>> Any ideas?

>>>

>>> Regards

>>> Wayne

>>