Restrict Shutdown?

[JT]

Is it possible, using GPO's, to restrict users from shutting down their
workstation but allow them to restart? It seems you can only restrict
shutdown and that removes the restart command as well. We want to prevent
users from shutting down at night. Countless emails and warnings and people
still shut down their systems. But we want the option to allow them to
restart in case they are asked by our department through the day without
requiring a user excluded from the policy in having to do so.

Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native AD
environment.

Thanks

 

[Greg O]

"JT" <no@mail.here> wrote in message
news:%23KwHLzfyHHA.5980@TK2MSFTNGP04.phx.gbl...
> Is it possible, using GPO's, to restrict users from shutting down their
> workstation but allow them to restart? It seems you can only restrict
> shutdown and that removes the restart command as well. We want to prevent
> users from shutting down at night. Countless emails and warnings and
> people still shut down their systems. But we want the option to allow them
> to restart in case they are asked by our department through the day
> without requiring a user excluded from the policy in having to do so.
>
> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native
> AD environment.
>
> Thanks
>

There is a setting in group policy:

User configuration/administrative templates/start menu and taskbar/

Prevents users from shutting down or restarting Windows.

This setting removes the Shut Down option from the Start menu and disables
the Shut Down button on the Windows Security dialog box, which appears when
you press CTRL+ALT+DEL.

This setting prevents users from using the Windows user interface to shut
down the system, although it does not prevent them from running programs
that shut down Windows.

If you disable this setting or do not configure it, the Shut Down menu
option appears, and the Shut Down button is enabled.

Note: It is a requirement for third-party applications with Windows 2000 or
later certification to adhere to this setting.

 

[Dragos CAMARA]

hi,
basics for OS it's the same thing restart or shutdown so isn't possible. but
you can cut the rights to shutdown and the admin to use the shutdown command
to restart computers.

another ideea is to cut the right to shutdown the system and on security
settings - allow system to be shutdown without having to logon to enable and
users have to logoff and then push the shutdown the system - but it will have
and the rights to shutdown the system.

--
Dragos CAMARA
MCSA Windows 2003 server


"JT" wrote:

> Is it possible, using GPO's, to restrict users from shutting down their
> workstation but allow them to restart? It seems you can only restrict
> shutdown and that removes the restart command as well. We want to prevent
> users from shutting down at night. Countless emails and warnings and people
> still shut down their systems. But we want the option to allow them to
> restart in case they are asked by our department through the day without
> requiring a user excluded from the policy in having to do so.
>
> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native AD
> environment.
>
> Thanks
>
>
>

 

[JT]

Ahhh...Okay thats a fair enough workaround. What I have been forced to do is
create a restrive workstation group and drop the users that dont adhere
continually and decide to shutoff into that group which i dont care for.
your suggestion should work. i never thought about that one.

Thanks


"Dragos CAMARA" <dragos_c@remove-this.hotmail.com> wrote in message
newsF253C6F-4ED6-4C88-9BB2-54110A69C324@microsoft.com...
> hi,
> basics for OS it's the same thing restart or shutdown so isn't possible.
> but
> you can cut the rights to shutdown and the admin to use the shutdown
> command
> to restart computers.
>
> another ideea is to cut the right to shutdown the system and on security
> settings - allow system to be shutdown without having to logon to enable
> and
> users have to logoff and then push the shutdown the system - but it will
> have
> and the rights to shutdown the system.
>
> --
> Dragos CAMARA
> MCSA Windows 2003 server
>
>
> "JT" wrote:
>
>> Is it possible, using GPO's, to restrict users from shutting down their
>> workstation but allow them to restart? It seems you can only restrict
>> shutdown and that removes the restart command as well. We want to prevent
>> users from shutting down at night. Countless emails and warnings and
>> people
>> still shut down their systems. But we want the option to allow them to
>> restart in case they are asked by our department through the day without
>> requiring a user excluded from the policy in having to do so.
>>
>> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native
>> AD
>> environment.
>>
>> Thanks
>>
>>
>>

 

[JT]

Thanks Greg O. I was aware of that one and have tested it, my gripe was as
mentioned, also losing the ability the restart. I guess you are limited
regardless if windows sees both commands pretty much the same. I am going to
try Dragos suggestion and apply the shutdown without having to login policy.

Thanks for the suggestions

"Greg O" <none@all.com> wrote in message
news:OMGjrEgyHHA.1208@TK2MSFTNGP03.phx.gbl...
>
> "JT" <no@mail.here> wrote in message
> news:%23KwHLzfyHHA.5980@TK2MSFTNGP04.phx.gbl...
>> Is it possible, using GPO's, to restrict users from shutting down their
>> workstation but allow them to restart? It seems you can only restrict
>> shutdown and that removes the restart command as well. We want to prevent
>> users from shutting down at night. Countless emails and warnings and
>> people still shut down their systems. But we want the option to allow
>> them to restart in case they are asked by our department through the day
>> without requiring a user excluded from the policy in having to do so.
>>
>> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native
>> AD environment.
>>
>> Thanks
>>
>
> There is a setting in group policy:
>
> User configuration/administrative templates/start menu and taskbar/
>
> Prevents users from shutting down or restarting Windows.
>
> This setting removes the Shut Down option from the Start menu and disables
> the Shut Down button on the Windows Security dialog box, which appears
> when you press CTRL+ALT+DEL.
>
> This setting prevents users from using the Windows user interface to shut
> down the system, although it does not prevent them from running programs
> that shut down Windows.
>
> If you disable this setting or do not configure it, the Shut Down menu
> option appears, and the Shut Down button is enabled.
>
> Note: It is a requirement for third-party applications with Windows 2000
> or later certification to adhere to this setting.
>

 

[Dragos CAMARA]

you are welcome.
--
Dragos CAMARA
MCSA Windows 2003 server


"JT" wrote:

> Ahhh...Okay thats a fair enough workaround. What I have been forced to do is
> create a restrive workstation group and drop the users that dont adhere
> continually and decide to shutoff into that group which i dont care for.
> your suggestion should work. i never thought about that one.
>
> Thanks
>
>
> "Dragos CAMARA" <dragos_c@remove-this.hotmail.com> wrote in message
> newsF253C6F-4ED6-4C88-9BB2-54110A69C324@microsoft.com...
> > hi,
> > basics for OS it's the same thing restart or shutdown so isn't possible.
> > but
> > you can cut the rights to shutdown and the admin to use the shutdown
> > command
> > to restart computers.
> >
> > another ideea is to cut the right to shutdown the system and on security
> > settings - allow system to be shutdown without having to logon to enable
> > and
> > users have to logoff and then push the shutdown the system - but it will
> > have
> > and the rights to shutdown the system.
> >
> > --
> > Dragos CAMARA
> > MCSA Windows 2003 server
> >
> >
> > "JT" wrote:
> >
> >> Is it possible, using GPO's, to restrict users from shutting down their
> >> workstation but allow them to restart? It seems you can only restrict
> >> shutdown and that removes the restart command as well. We want to prevent
> >> users from shutting down at night. Countless emails and warnings and
> >> people
> >> still shut down their systems. But we want the option to allow them to
> >> restart in case they are asked by our department through the day without
> >> requiring a user excluded from the policy in having to do so.
> >>
> >> Workstations: XP Pro, Win2k Pro all patches security updates. 2003 native
> >> AD
> >> environment.
> >>
> >> Thanks
> >>
> >>
> >>
>
>
>