Unable to disable or hide Shutdown button on logon window.

[s.k.easley]

I'm trying to disable or hide the shutdown button on the logon window.
It appears that the way to do this is to set the following registry
value to zero (DWORD):

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system,
"shutdownwithoutlogon".

I'm trying to do this in the .slx file's "Extra Registry Data" section,
but it's not having any effect. The Shut Down button remains and the
registry value, when checked in regedit, is one.

I've tried changing the build order for this item from the default 1000
to 1200, 12000, and then 32676 trying to make this setting one of the
last things the happen in the first boot, but to no avail.

I have another entry in the "Extra Registry Data" that turns off the
AutoRun feature on the CD-ROM drive, and that works just fine. So I'm
confused as to why one works and the other does not.

If you have any ideas, I would love to hear them.

 

[KM]

easley,

You must be playing with the wrong path to the registry value.
If I understood correctly what you're trying to archive, you should change the following value:
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon],"ShutdownWithoutLogon"=dword

http://www.microsoft.com/resources/...s/2000/server/reskit/en-us/regentry/12328.asp

When you set this value through your component, please make sure to set the build order for the component after the "Windows Logon
(Standard)" and "Terminal Services Core" as those components would set the value too.

=========
Regards,
KM

 

[s.k.easley]

Thanks for your reply. I didn't know there was another
"ShutdownWithoutLogon" value in the registry. At first I thought that
was the answer but after some testing it doesn't appear to be.

For shorthand, I'll refer to "ShutdownWithoutLogon" value in
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] as
"the Windows value" and the one in [HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon] as "the NT value".

The two values have different data types. The Windows values is a
REG_DWORD and the NT value is a REG_SZ.

I tested these values in my XPe image by setting them in regedit and
restarting. This is what I got:

Windows Value NT Value Logon Shutdown button
----------------- ---------
-----------------------------------
0 "0" disabled
0 "1" disabled
1 "0" enabled
1 "1" enabled

The NT value isn't having any effect, dispite Microsoft's
documentation.

How did you know that the "ShutdownWithoutLogon" value was set in the
"Windows Logon (Standard)" and "Terminal Services Core" components? In
both those cases, they're setting the NT value to "0". So if that
setting worked, the button would already be disabled. If I could find
out where the Windows value was being set, maybe I could change it
there. I've done searches inside of TD and in the XPe helpfiles for
"ShutdownWithoutLogon", with no results.

Also, I still don't know why my attempts to set the Windows value are
not having any effect, no matter how high I set the build order.

 

[KM]

Ahh.. I should've been more careful when mentioned the registry path to the ShutdownWithoutLogon value.

How MS Gina works (this is the component that reads the ShutdownWithoutLogon value and applies it to the Shutdown button appearance)
is it first reads the Winlogon registry value and then the system policy value. In other words, the system policy registry value
will overwrite the one read under Winlogon key.

However, looking at the behavior a little bit deeper I don't think Microsoft description for the ShutdownWithoutLogon policy is
correct. It doesn't seem to have an affect of the Shutdown button itself but rather on the permission to perform a shutdown when you
are not logged in yet.
You can easy give it a try on XP Pro machine first. Then you'd know whether it is the right value for you or not.

And as Zirong correctly added, NoClose policy should be of some interest to you too.
http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/regentry/58867.asp


=========
Regards,
KM

 

[Zirong Wang]

hello,

the following setting disables shutdown, be aware, you can not anymore
shutdown the
Windows.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoClose=dword:00000001

note it is HKCU and not HKLM

no close==no shutdown, very explicit n'est-ce pas?

Zirong