You can do this by either editing local or group policy (it depends on your
environment). Set the group policy at level that you wish (e.g. domain or OU
level).
This permission is defined under Computer Configuration -> Windows
Settings -> Security Settings -> Local Policies -> User Rights Assignment.
Here look for policy "Shut down the system". Double click the policy and add
user that you wish to grant this right. It can either be domain or local
user (or group).
I didn't mention that the system is on a domain in which I do not have
domain admin priviledges but do have local admin priviledges. I must rendor
an account with full admin priviledges for the purpose of shutting down the
system remotely, this I do not want to do. I only want to create an account
so he can shut down only, even if I've locked the workstation. I do not
want the admin to have any access other than shutting down the system.
Can this be done?
Try editing your local policy. I can't be sure if it will work since it
depends on your domain environment configuration.
Edit configuration under Computer Configuration -> Windows Settings ->
Security Settings -> Local Policies -> User Rights Assignment. Double click
on policy "Force shutdown from a remote system". Double click the policy and
add domain user or group that you wish to grant this right.
User on remote system can then try and shutdown your computer using this
command:
shutdown -m \\your_computer
For details see shutdown /?
Mike
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.