GROUP POLICY SHUT DOWN COMMAND?????

[lefty78]

I am running a net work with one windows 2000 server and 20 desktops. 16 of the desktops are set up with the only local account being the admin account and the user logs on to the domain (not locally to the desktop). My issue is that the users are not given the option to shut down the machine. In result, they have to log off, then hit ctrl,alt,delet and select shut down from the login window. I have group policy implemented. I have tried this with the option "disable shut down button" as unconfigured and disabled, the button still does not wor. Suggestions?

 

[paul123456]

so does this disable when the login to there local machine with the admin account by disable i mean the shutdown option is there? Thanks, PAUL

A+
NET+
MCP
MCSA

 

[lefty78]

the shutdown option is there when you logon to the local machine, just not when you logon to the domain through the local machine

 

[paul123456]

ok first go to start and on the run command type dsa.msc
then go to your domain.. right click it.. then go to the GPO and check if its enabled in there
if it isnt go back to users and comuters right click domain controlers container and go to properties check that Group policy to see if it is enabled in their
if not go to admin tools. then site and services. in there right click the default site and go to properties. check the Group policy there to see if its enabled, if not..
right click my comuter go to manage and then find the policy in there check to see if it is enabled. ATTENTION.... when u do all of these make sure that the enable No override and Block policy inheritance are NOT checked. this crap is not recommended by anyone. it'll screw u up in the long run.. after u have completed this go to start then in the run command type cmd (then enter)
type this: secedit /refreshpolicy machine_policy /enforce
also after that is done and u hit enter type this
secedit /refreshpolicy user_policy /enforce.
reboot the users machine (twice) and try it again.
if this doesn't work contact me at plimpias@bak.rr.com
we'll fix it
Thanks, PAUL

 

[lefty78]

You lead me to the correction, it was in the domain policy, but not where I had previously looked. There is a setting that will remove the shutdown command, but this is not where the answer to my question resided. It was under computer configuration, windows settings, security settings, local policies, user rights assignment. You need to assign the correct permissions to the 'Shut Down the System' string.

 

[paul123456]

actually not to be an ass but your wrong. remmember, domain policies override local policies. by default this "shut down the sytem" policy allows everyone to be able to shut it down, by adding groups in there u are overriding another policy that was set. probably at the local level of the domain. to find this go to start programs admin tools then local security policy. this is were its probably at. whoever told u how to do this gave u an east answer, but this is not the correct way how to fix it. find the problem, then fix it. hunt away. Thanks, PAUL