DISABLE / REMOVE SHUTDOWN FROM START BAR

[BazJ]

I would my like my logged on users to use the Secure Attention Sequence (SAS) to shutdown their NT 4 Wk Stns and not use the button available in the start bar.

I have used NoClose and SeShutdownPrivelage within the local registry settings but both efforts resulted in the option of a shutdown being removed from both areas.

I have little hair and it is rapidly leaving with this problem.

Rgds

Baz

 

[johncurtis]

Hmm, I'm not sure you can remove the shut down from just the Start menu. Why do you want to do this?

John

 

[BazJ]

The company clampdown document for NT4 Wk Stn states that shutting down via the "Start button" method could lead to the system leaving itself open to a masquerade attack. Consequently, all users are to use the SAS to logout.

Baz

 

[wolluf]

Where does the company get its info from? What is SAS by the way (is it Ctrl+alt+del?). I thought the security issue was logging on (NT uses ctrl+alt+del for that reason, in 2k & XP you don't have to use it). Surely shutting down is just that - machine is shut down, so can't be subject to any sort of software attack, masquerade or not.

 

[johncurtis]

I've never heard of a problem with shutting down via the start button. I'm not exactly a security expert though. Perhaps you should ask the question (whether shutting down via start button is insecure) in the security forum here (forum83)

John

 

[CathMan]

If you must, then you can do it by creating a policy for your users. Within poledit you can restrict the SHUTDOWN item. This is found within the policy under Shell-Restrictions. This will also remove the shutdown from the Windows NT Security Window. Good Luck and be careful.