Limiting Shutdown options

  • Thread starter Thread starter Tom Ker
  • Start date Start date
T

Tom Ker

I know that I can completely disable the Shutdown button by using User
Configuration\Administrative Templates\Start Menu and Taskbar\Remove and
prevent access to the Shut Down command. We want to do something slightly
different from that. We'd like to keep the Shutdown button available, but
remove the Stand by, Hibernate, and Shutdown options from list in the Shut
Down Windows dialog leaving only Logoff (UserName) and Restart.

Any way to do that with a GPO?

Thanks,

Tom
 
You can (with GPO) remove the seShutdown privilege from some or all of the
users, and they will only have Logoff option available. This is configurable
under Computer Configuration\Windows Settings\Security Settings\Local
policies\user rights assignment,
"Shut down the system"

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


I know that I can completely disable the Shutdown button by using User
Configuration\Administrative Templates\Start Menu and Taskbar\Remove and
prevent access to the Shut Down command. We want to do something slightly
different from that. We'd like to keep the Shutdown button available, but
remove the Stand by, Hibernate, and Shutdown options from list in the Shut
Down Windows dialog leaving only Logoff (UserName) and Restart.

Any way to do that with a GPO?

Thanks,

Tom
 
Thanks for the prompt reply, Dmitry.

That's interesting, but it results in effectively the same thing as the fist setting I mentioned. If I used the setting you suggest and removed everyone but Admins normal users still have the Shutdown button, but the only option in the dialog is Logoff. We're trying to force people to Restart at the end of the day instead of doing a Shutdown so everyone's systems will be a known state overnight. User education is failing, so I was looking for a way to remove the Shutdown option leaving only Restart and Logoff.

Any other Ideas?

Tom
You can (with GPO) remove the seShutdown privilege from some or all of the users, and they will only have Logoff option available. This is configurable under Computer Configuration\Windows Settings\Security Settings\Local policies\user rights assignment,
"Shut down the system"

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


I know that I can completely disable the Shutdown button by using User
Configuration\Administrative Templates\Start Menu and Taskbar\Remove and
prevent access to the Shut Down command. We want to do something slightly
different from that. We'd like to keep the Shutdown button available, but
remove the Stand by, Hibernate, and Shutdown options from list in the Shut
Down Windows dialog leaving only Logoff (UserName) and Restart.

Any way to do that with a GPO?

Thanks,

Tom
 
Ah, looks like I've misread your post and didn't notice the restart
requirement. Since restart requires a shutdown, the policy would either
allow or deny both restart and shutdown. But alternatively, you can allow
only logoff, and schedule a script at night at any given time that will
reboot the computers. This way all the PCs will be at "clean boot" state in
the morning.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


Thanks for the prompt reply, Dmitry.

That's interesting, but it results in effectively the same thing as the
fist setting I mentioned. If I used the setting you suggest and removed
everyone but Admins normal users still have the Shutdown button, but the
only option in the dialog is Logoff. We're trying to force people to
Restart at the end of the day instead of doing a Shutdown so everyone's
systems will be a known state overnight. User education is failing, so I
was looking for a way to remove the Shutdown option leaving only Restart and
Logoff.

Any other Ideas?

Tom
You can (with GPO) remove the seShutdown privilege from some or all of
the users, and they will only have Logoff option available. This is
configurable under Computer Configuration\Windows Settings\Security
Settings\Local policies\user rights assignment,
"Shut down the system"

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


I know that I can completely disable the Shutdown button by using User
Configuration\Administrative Templates\Start Menu and Taskbar\Remove
and
prevent access to the Shut Down command. We want to do something
slightly
different from that. We'd like to keep the Shutdown button available,
but
remove the Stand by, Hibernate, and Shutdown options from list in the
Shut
Down Windows dialog leaving only Logoff (UserName) and Restart.

Any way to do that with a GPO?

Thanks,

Tom
 
Back
Top