gpo to permit restart but no permit shutdown

Discussion in 'Active Directory' started by David Dapena, Mar 1, 2006.

  1. David Dapena

    David Dapena Guest

    Hi !

    Anyone know how to do this with GPO's in windows 2003

    I want that users in my domain can restart the system but thay can't
    shutdown the system.

    any idea ?
     
    David Dapena, Mar 1, 2006
    #1
    1. Advertisements

  2. David Dapena

    MicroChip Guest

    I have the same need, and the reason is because we wan't users to be able to
    RESTART when they call us with an issue and we tell them to reboot, but we
    don't want them to be able to SHUTDOWN because we have our corporate
    antivirus and patch management systems set to scan and patch during late
    evening hours.

    So far I have found that disabling shutdown also disables the users ability
    to restart.
     
    MicroChip, Apr 25, 2006
    #2
    1. Advertisements

  3. David Dapena

    David Dapena Guest

    Exactly. I need for this reason (Antivirus), on the other hand I distribute
    sms package at night.

    To solve this we have made a script to reebot the system (in a user
    desktoop) and by gpo don't display reboot buttom.
     
    David Dapena, Apr 26, 2006
    #3
  4. David Dapena

    MicroChip Guest

    I am considering the same thing. How did you deploy the shortcut to
    "%windir%\System32\SHUTDOWN.exe -r -t 05" to all the desktops?
     
    MicroChip, Apr 26, 2006
    #4
  5. David Dapena

    Guest Guest

    A possibe mod to the script below would be to use %USERPROFILE% and
    \Desktop just to ensure you are getting it to the current profile
    desktop. (Avoids those cases where user may have a different profile
    iteration or name).

    HTH

    Harry



    Ha®®y

     
    Guest, May 6, 2006
    #5
  6. Good call.
     
    Paul Williams [MVP], May 9, 2006
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.