Setting to Restart but not Shut Down

[Guest]

Currently, the users on my domain can both restart their computers and shut
them down. I want to limit them so they cannot shut the machine down. I
found the registry tweak that removes the shutdown button from the start
menu. However, I cannot find anything that removes the shutdown button from
the box that comes up when you press CTRL-ALT-DEL -- it still says Shut Down.
That would be OK if, when you click Shut Down, the only options that come up
on the drop down menu are Log Off, Restart and Stand By. But the Shut Down
option is there on the drop down menu. Does anyone know how to take that off?

Thanks in advance for your help!

Tracy cLaugle

 

[Ken Blake, MVP]

Currently, the users on my domain can both restart their computers and shut
them down. I want to limit them so they cannot shut the machine down. I
found the registry tweak that removes the shutdown button from the start
menu. However, I cannot find anything that removes the shutdown button from
the box that comes up when you press CTRL-ALT-DEL -- it still says Shut Down.
That would be OK if, when you click Shut Down, the only options that come up
on the drop down menu are Log Off, Restart and Stand By. But the Shut Down
option is there on the drop down menu. Does anyone know how to take that off?

Even if you found a way to do this, how would you stop them from using
the power off button or pulling the plug?

 

[WTC]

Currently, the users on my domain can both restart their computers
and shut them down. I want to limit them so they cannot shut the
machine down. I found the registry tweak that removes the shutdown
button from the start menu. However, I cannot find anything that
removes the shutdown button from the box that comes up when you press
CTRL-ALT-DEL -- it still says Shut Down. That would be OK if, when
you click Shut Down, the only options that come up on the drop down
menu are Log Off, Restart and Stand By. But the Shut Down option is
there on the drop down menu. Does anyone know how to take that off?

Hi Tracy Laugle,

Use a GPO and use your OUs in your domain environment to enforce the
GPO.

Create a GPO and link the GPO to your desired OUs.

Use the GPO Editor and navigate to:

User Configuration > Administrative Templates > Start Menu and Taskbar

Enabled "Remove and prevent access to the Shut down command".

Or

Create a GPO and link the GPO to your desired OUs.

Computer Configuration > Windows Settings > Security Settings > Local
Policies

Define the Groups and/or Users that are allowed to shut down the System
for "Shut down the system"