Guest Wayne Gore Posted August 24, 2007 Posted August 24, 2007 Hi I want to enable the "Shutdown" button on my domain controllers (don't ask why) to a number of administrators who are not in the domain admins group. The will connect to the server using Terminal Sevices. I have altered the Domain Controller GPO with the following settings: Computer configuration\Windows Settings\Local Policies\Security Option\Shutdown: Allow system to be shut down without having to log on = ENABLED Computer configuration\Windows Settings\Local Policies\User Rights Assigment\Shut down the system = Here I added the user accounts in question. The problem is that these settings only enables the "Shutdown" button for the console (however not if you connect with TS /Console) but not for a Terminal Server Session. I also tried to edit the registry by changing the following value to "1": HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ShutdownWithoutLogon That didn't help either. Any ideas? Regards Wayne
Guest Soo Kuan Teo [MSFT] Posted August 24, 2007 Posted August 24, 2007 Re: Enable logon shutdown button Can you please check your group policy (gpedit.msc) under User Configuration->Administrative Templates->Start Menu and Taskbar "Remove and prevent access to the Shut Down Command" is enabled? If your machine is joined to a domain, you may also need to check from your domain controller "Active Directory Users and Computers" Thanks Soo Kuan -- This posting is provided "AS IS" with no warranties, and confers no rights. "Wayne Gore" <WayneGore@discussions.microsoft.com> wrote in message news:C71B14B6-EE5F-4F94-BD43-8F9EF979AEEC@microsoft.com... > Hi > > I want to enable the "Shutdown" button on my domain controllers (don't ask > why) to a number of administrators who are not in the domain admins group. > The will connect to the server using Terminal Sevices. > > I have altered the Domain Controller GPO with the following settings: > > Computer configuration\Windows Settings\Local Policies\Security > Option\Shutdown: Allow system to be shut down without having to log on = > ENABLED > > Computer configuration\Windows Settings\Local Policies\User Rights > Assigment\Shut down the system = Here I added the user accounts in > question. > > The problem is that these settings only enables the "Shutdown" button for > the console (however not if you connect with TS /Console) but not for a > Terminal Server Session. > > I also tried to edit the registry by changing the following value to "1": > > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows > NT\CurrentVersion\Winlogon\ShutdownWithoutLogon > > That didn't help either. > > Any ideas? > > Regards > Wayne
Guest Wayne Gore Posted August 24, 2007 Posted August 24, 2007 Re: Enable logon shutdown button Hi Thanks for you reply. As I mentioned in my inital posting: - it is on the domain controllers I want it enabled - it is in the Terminal Server sessions in at Logon prompt that I want to enable it. Cheers Wayne "Soo Kuan Teo [MSFT]" wrote: > Can you please check your group policy (gpedit.msc) under User > Configuration->Administrative Templates->Start Menu and Taskbar "Remove and > prevent access to the Shut Down Command" is enabled? > If your machine is joined to a domain, you may also need to check from your > domain controller "Active Directory Users and Computers" > Thanks > Soo Kuan > > > -- > This posting is provided "AS IS" with no warranties, and confers no rights. > > "Wayne Gore" <WayneGore@discussions.microsoft.com> wrote in message > news:C71B14B6-EE5F-4F94-BD43-8F9EF979AEEC@microsoft.com... > > Hi > > > > I want to enable the "Shutdown" button on my domain controllers (don't ask > > why) to a number of administrators who are not in the domain admins group. > > The will connect to the server using Terminal Sevices. > > > > I have altered the Domain Controller GPO with the following settings: > > > > Computer configuration\Windows Settings\Local Policies\Security > > Option\Shutdown: Allow system to be shut down without having to log on = > > ENABLED > > > > Computer configuration\Windows Settings\Local Policies\User Rights > > Assigment\Shut down the system = Here I added the user accounts in > > question. > > > > The problem is that these settings only enables the "Shutdown" button for > > the console (however not if you connect with TS /Console) but not for a > > Terminal Server Session. > > > > I also tried to edit the registry by changing the following value to "1": > > > > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows > > NT\CurrentVersion\Winlogon\ShutdownWithoutLogon > > > > That didn't help either. > > > > Any ideas? > > > > Regards > > Wayne > >
Guest Jeff Pitsch Posted August 24, 2007 Posted August 24, 2007 Re: Enable logon shutdown button Did you check your group policy to confirm that it is setup correctly. that's what he was talking about. You may have prevented shut down through gpo which means you need to reverese for those particular users. Wayne Gore wrote: > Hi > > Thanks for you reply. > > As I mentioned in my inital posting: > > - it is on the domain controllers I want it enabled > - it is in the Terminal Server sessions in at Logon prompt that I want to > enable it. > > Cheers > Wayne > > "Soo Kuan Teo [MSFT]" wrote: > >> Can you please check your group policy (gpedit.msc) under User >> Configuration->Administrative Templates->Start Menu and Taskbar "Remove and >> prevent access to the Shut Down Command" is enabled? >> If your machine is joined to a domain, you may also need to check from your >> domain controller "Active Directory Users and Computers" >> Thanks >> Soo Kuan >> >> >> -- >> This posting is provided "AS IS" with no warranties, and confers no rights. >> >> "Wayne Gore" <WayneGore@discussions.microsoft.com> wrote in message >> news:C71B14B6-EE5F-4F94-BD43-8F9EF979AEEC@microsoft.com... >>> Hi >>> >>> I want to enable the "Shutdown" button on my domain controllers (don't ask >>> why) to a number of administrators who are not in the domain admins group. >>> The will connect to the server using Terminal Sevices. >>> >>> I have altered the Domain Controller GPO with the following settings: >>> >>> Computer configuration\Windows Settings\Local Policies\Security >>> Option\Shutdown: Allow system to be shut down without having to log on = >>> ENABLED >>> >>> Computer configuration\Windows Settings\Local Policies\User Rights >>> Assigment\Shut down the system = Here I added the user accounts in >>> question. >>> >>> The problem is that these settings only enables the "Shutdown" button for >>> the console (however not if you connect with TS /Console) but not for a >>> Terminal Server Session. >>> >>> I also tried to edit the registry by changing the following value to "1": >>> >>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows >>> NT\CurrentVersion\Winlogon\ShutdownWithoutLogon >>> >>> That didn't help either. >>> >>> Any ideas? >>> >>> Regards >>> Wayne >>
Recommended Posts