Block windows remote shutdown command on a domain

[mrburch]

I'm looking for a way to block the windows shutdown command from
working on some servers on our domain. I know it is possible as the
previous admin has it currently setup on a few. Despite being a domain
admin and the remote server being on the domain I get "Access is
denied" when running the shutdown command against it. I want to enable
this feature on other servers as well but I can't figure out how. I do
believe it is a registry setting on the remote server itself.

 

[Doug Knox MS-MVP]

This is done in Group Policies, Computer Configuration, Windows Settings, Security Settings, Local Policies, User Rights Assignments

Force Shutdown from a remote system. The default is Adminstators. You can modify this to specific users or groups, or not have any groups/users listed to completely block this feature.

 

[mrburch]

I tested it out on another users system today. On his system we removed
administrators from the Force Shutdown option and he added only
himself. Then I ran the shutdown command and it still shutdown his PC.
Any suggestions?

 

[Doug Knox MS-MVP]

Did you reboot after applying the changes? That's the only suggestion I have, at this point.