what about applying a policy? -
or under the local user manager, policies, user rights, shut down this machine (do not
allow the
user(s)) access to this right.
----- Original Message -----
From: "Andrew Whitton" <[EMAIL PROTECTED]>
To: "NT System Admin Issues" <[EMAIL PROTECTED]>
Sent: Friday, September 07, 2001 11:08 AM
Subject: Shutting down servers
We have a couple of member servers (some NT4, some W2K) that various
people need to sign onto. Because they are in a secure location they use
Terminal Services to access these.
We have had a situation where someone selected START | SHUTDOWN and then
RESTART rather than LOGOFF !!! As this was a live server we obviously want
to prevent this happening again.
We have found 2 registry settings within HKCU, 1 to remove the option to
shutdown and also 1 to add the "log off user xxx" option in START.
These are within HKCU/Software/Microsoft/Windows/CurrentVersion/Policies
We were going to apply these using a *.reg file in a logon script.
HOWEVER, most of the users that sign onto these servers arent members of
Administrators. The permissions on these keys are therefore set to READ
for these users in this case. RESULT : they cant write the required values
(we appreciate it makes sense not to allow users to change these policy
related reg settings)
Has anyone any inspired thoughts or addressed the issue of restricting
shutdown to servers in another way ?
Regards,
Andrew Whitton.
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
