gpo permit restart system but not permit shutdown system

[Guest]

Hi !

have anybody idea to do this ?

I have a domain in window 2003 and all clients in windows xp.

My intention is permit restart the system (windows xp) but not permit
shutdown the system. there are some gpo to do this ?

 

[Brandon McCombs]

Hi !

have anybody idea to do this ?

I have a domain in window 2003 and all clients in windows xp.

My intention is permit restart the system (windows xp) but not permit
shutdown the system. there are some gpo to do this ?

under Computer Configuration->Windows Settings->Security settings->User
Rights Assignment (I'm guessing on path b/c i don't have it in front of
me) is a privilege for allowing users to shutdown the system. I've
always found this a bit stupid since if a user wants to shutdown the
system they can hold the power buttton in for 5 seconds or pull the
cord. Just make sure that the privilege does not have any groups listed
that would contain usernames that you don't want to allow to shutdown
the system. I don't recall what is listed by default.

There is nothing for restarting the system since that is essentially the
same thing as a shutdown. If you let them restart why not shutdown? If
they shutdown all they have to do is hit the power button again to
simulate a restart so why discriminate?

 

[Guest]

I have the same need, and the reason is because we wan't users to be able to
RESTART when they call us with an issue and we tell them to reboot, but we
don't want them to be able to SHUTDOWN because we have our corporate
antivirus and patch management systems set to scan and patch during late
evening hours.

So far I have found that disabling shutdown also disables the users ability
to restart.