Hi all,

We're trying to disable the logoff/shutdown buttons to a group of users on some of our servers.

We're aware that this can be done on group policy on User Configuration > Administrative Templates > Start Menu & Taskbar.

However we can only get it working for an OU of users and not an OU of computers.

What we need to do is apply this to a set of computers for a group. However when we try that it just doesn't seem to work.

Any ideas?

Thanks

JonH

You need to configure loopback processing so that the GPO will take effect
on the computer, regardless of which user logs on:

http://www.microsoft.com/resources/d...b_gpu_kvam.asp

--
******************************
Laura E. Hunter - MCSE, MCT, MVP
Replies to newsgroup only


"JonH" <(E-Mail Removed)> wrote in message
news:7F6C304B-2BD7-4D4F-A4A1-(E-Mail Removed)...
> Hi all,
>
> We're trying to disable the logoff/shutdown buttons to a group of users on
> some of our servers.
>
> We're aware that this can be done on group policy on User Configuration >
> Administrative Templates > Start Menu & Taskbar.
>
> However we can only get it working for an OU of users and not an OU of
> computers.
>
> What we need to do is apply this to a set of computers for a group.
> However when we try that it just doesn't seem to work.
>
> Any ideas?
>
> Thanks
>
> JonH

Hello JonH

This is because the GPO options comes in two parts, Computer Configuration
and User Configuration. This means that settings under Users Configuration
only applies to effected users and not based on computers.

There is how ever a setting that can make both User and Computer
Configuration be applied to computers, See the link below.


User Group Policy loopback processing mode
http://www.chrisse.se/GPO.asp?ID=422

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips

"JonH" <(E-Mail Removed)> skrev i meddelandet
news:7F6C304B-2BD7-4D4F-A4A1-(E-Mail Removed)...
> Hi all,
>
> We're trying to disable the logoff/shutdown buttons to a group of users on
some of our servers.
>
> We're aware that this can be done on group policy on User Configuration >
Administrative Templates > Start Menu & Taskbar.
>
> However we can only get it working for an OU of users and not an OU of
computers.
>
> What we need to do is apply this to a set of computers for a group.
However when we try that it just doesn't seem to work.
>
> Any ideas?
>
> Thanks
>
> JonH