Only administrators should have the "Shut down the system" right, which is set in the local security policy, or Group Policy. Remove the user from the Administrators group and they won't be able to shut down the machine
There are cosmetic changes you can make to hide the shut down selection from the start menu & task manager (via Group Policy), but these won't stop a crafty person from restarting the server via software installation that asks to reboot or via cmd prompt like tsshutdn or shutdown
If you've assigned the users to the administrators group to run an application, use filemon & regmon to determine what regstry keys or file system objects a normal user needs permission to so you don't have to elevate their system-wide priviliges
http://www.workthin.com/tsdown.ht
Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co
----- Lee wrote: ----
I have granted access to an accounting application for or remote users thru Terminal server but anyone of these can shutdown the server. I would like to disable this so that only the administrator can do this from our Head Office
Please help
