How prevent user from shutting down system?

  • Thread starter Thread starter Joe Smith
  • Start date Start date
J

Joe Smith

Can someone please help. I am new to changing settings for
individual users.

(a) I want to prevent a particular user from seeing the option to
"Turn Off The Computer" on her Start menu.

(b) I would like her to be able to use ALT-F4 on the desktop to show
the "Turn Off Computer" popup window.

Is both (a) and (b) this possible?
If not then I would rather have (a) than (b).

------

As administrator I have tried the following with no success:


(1) Control Panel > Administrative Tools > Local Security Policy.
Click on 'User Rights Assignments' and then double click on 'Modify
Shut Down The System' list.

Here I can add her name but I am not clear what this achieves.


(2) Start > Run > gpedit.msc > "User Configuration" >
"Administrative Templates" > "Start Menu and Taskbar" > double click
on "Remove Logoff on the Start Menu". It is set to "Not Configured".

In the popup window I cannot identify which user I want this to apply
to.



Thank you for any help.
 
A and B are mutually exclusive. You can prevent the user from shutting down the system, or not. While logged on to the user's account, click Start, Run and enter REGEDIT Go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Right click in a blank area of the right pane and select New, DWord value. Name the new value NoClose. Double click the value you just created and set it to 1. Log off/log on and you'll see the change.

You may need to temporarily elevate the user to an Administrator level account to make this change.
 
The first thing that pops into my mind is that if the shutdown option
doesn't appear on the start menu, will she know to go to alt-f4, or is she
just going to power it down manually, and thus potentially cause you more
problems?
 
ALT-F4 is for me when I am logged on to that side doing some
maintenance and I know it is safe to shut down the system from
that logon.


On Mon 15 Aug 2005 00:07:19, D.Currie wrote:
 
A and B are mutually exclusive. You can prevent the user from
shutting down the system, or not. While logged on to the user's
account, click Start, Run and enter REGEDIT Go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Policies\Explorer

Right click in a blank area of the right pane and select New,
DWord value. Name the new value NoClose. Double click the
value you just created and set it to 1. Log off/log on and
you'll see the change.

You may need to temporarily elevate the user to an Administrator
level account to make this change.
Click to expand...


Thank you for the info Doug. I have to say that surely there must be
an easier way to customize this sort of thing rather than having to
log on as the person first and perhaps to give them adnim rights too
and to make sure they can access the registry editor.

There might lots and lots of changes which need to be made to another
pseson's logon/sesion. Is there not an administrator access point?
I thought that the Local Security Policy (or even the Group Editor
console) was kind of close to what I wanted.

My problem (see my first posting) is that I can't quite figure out
how to get them to accept a different user ID.
 
Local Security Policies work fine on XP Pro. In a non-domain environment, though, Group Policies apply to all users of the machine.

Two options:

1) See my web site, www.dougknox.com, Win XP Utilities, Windows XP Security Console. This utility will allow you to apply many of the per-user group policy settings on a per user basis.

2) http://support.microsoft.com/?id=293655
How to apply local policies to all users except administrators in a workgroup setting in Windows 2000

This KB article applies to XP as well.
 
Back
Top