Shutdown remotely

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

At the end of every work day I am required to shut down 30 computers in my
computer lab. In order to make life easier for myself I decided to create a
batch file that used the shutdown command with the -m \\computername
extension to shut down all the computers. However 29 of the computers shut
down properly and the other computer gives me an "Access is Denied" error
message.

The computers are all in the same workgroup and all have the same Usernames
and Passwords.

I have added the Everyone group to Computer Configuration\Windows
Settings\Security Settings\Local Policies\User Rights Assignment\Force
shutdown from a remote system

Does anybody have any suggestions as to what I may have overlooked?
 
FriKaZee said:
At the end of every work day I am required to shut down 30
computers in my computer lab. In order to make life easier for
myself I decided to create a batch file that used the shutdown
command with the -m \\computername extension to shut down all the
computers. However 29 of the computers shut down properly and the
other computer gives me an "Access is Denied" error message.

The computers are all in the same workgroup and all have the same
Usernames and Passwords.

I have added the Everyone group to Computer Configuration\Windows
Settings\Security Settings\Local Policies\User Rights
Assignment\Force shutdown from a remote system

Does anybody have any suggestions as to what I may have overlooked?
Click to expand...

Security-wise - you added EVERYONE..
And you added EVERYONE to a group that is allowed to remotely shutdown the
system. heh

Can you PSEXEC as the known user on the trouble machine and run the shutdown
command locally?

Like a batch script:

for /f %%u in (PCs.txt) do (
start psexec \\%%u -u "USERNAME" -p "%1"
c:\windows\system32\shutdown.exe -s -f -t 60 -c "The Lab is CLOSED."
)

Where PCs.txt contains a list of the machine or IPs... (One per line)
You type in:
nameofbatch password
to start it and enter the password for "USERNAME"...
 
Security-wise, I assessed the risk of allowing Everyone the ability to
shutdown the computer and didnt really see a problem with it in our lab. None
of the computers have access to more than an internet browser, google earth,
and a few games.

As far as PSEXEC goes, when I tried creating the script you posted, I just
get the error that Windows cant find PSEXEC. I'm also not familiar with this
command, what is it used for? By the looks of your script it is used to run a
program using another users credentials similar to the runas command?
 
I have solved my problem. The answer was in another post. Someone had
mentioned changing a setting which forced computers to authenticate as a
guest.

Thanks for your help
 
FriKaZee said:
At the end of every work day I am required to shut down 30
computers in my computer lab. In order to make life easier for
myself I decided to create a batch file that used the shutdown
command with the -m \\computername extension to shut down all the
computers. However 29 of the computers shut down properly and the
other computer gives me an "Access is Denied" error message.
Click to expand...

You may be able to use the Security Configuration and Analysis MMC
snap-in to restore the default NTFS permissions. This KB article says
it applies to Windows 2000, but I've followed the same procedure to
resolve an issue similar to the one you're experiencing on a Windows XP
Professional PC.

http://support.microsoft.com/kb/266118
 
Back
Top