SeShutdownPrivilege (Shut down the system) allows a user to restart, sleep, or shutdown the computer.
Be aware that administrators are also granted SeRemoteShutdownPrivilege (Force shutdown from a remote system) by default. That said, I'm not sure how you are going to accomplish this if the users have local admin rights. -----Original Message----- From: Rick Berry [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 10, 2008 11:45 AM To: NT System Admin Issues Subject: deny restart local policy? does the Local Policy/User Rights Assignment/Shut Down The System part of policy encompass a restart as well as shutdown? need to deny folks on a particular TS box that require local admin rights the ability to reboot it. i don't recall if explicit denial of "shut down the system" also means "you can't reboot it either sucka" ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
