Users on 1 site cannot shutdown

[Andrew Story]

Hi,

I've posted this previously in the AD group, but it is not solved.

We have a single Win2k domain with multiple sites, all DC's have SP4
installed. On one site only, any user not a member of local admins or a
domain admin cannot shutdown a machine. When you click start/shutdown, the
only option on the 'shut down windows' drop down box is 'logoff'

I have had a real good look in the policies but cannot find anything that
looks like it may be casuing this, as I say it's only on one site. Anuone
have any ideas?

 

[Roger Abell [MVP]]

So, you are sure that the user right to shutdown the machine is not
being controlled in any GPO that impacts machines of that site?
If so, are you sure, if GPO is leaving this not configured, that machines
of the site have not had this set in local policy?

 

[Steven L Umbach]

Open Local Security Policy [secpol.msc] on one of those computer to see what
the user right for shutdown the system has for users/groups. For Windows
2000 computer check both the local and effective setting. If the local
setting is different than the effective setting then a domain/OU level Group
Policy is enforcing that user right. For Windows XP Pro/2003 computers if
you can not configure that user right in Local Security Policy then there is
a domain/OU level Group Policy enforcing the setting. You would have to run
the Resultant Set of Policy mmc snapin on an XP Pro computer to see what
Group Policy is applying the setting and for Windows 2000 you could use the
support tool gpresult to see what Group Policies are being applied to the
computer and then investigate those Group Policies to see if they have that
user right configured. --- Steve

 

[Andrew Story]

Thanks for the responses guys, I'll run through your suggestions and post
back the results.

Open Local Security Policy [secpol.msc] on one of those computer to see what
the user right for shutdown the system has for users/groups. For Windows
2000 computer check both the local and effective setting. If the local
setting is different than the effective setting then a domain/OU level Group
Policy is enforcing that user right. For Windows XP Pro/2003 computers if
you can not configure that user right in Local Security Policy then there is
a domain/OU level Group Policy enforcing the setting. You would have to run
the Resultant Set of Policy mmc snapin on an XP Pro computer to see what
Group Policy is applying the setting and for Windows 2000 you could use the
support tool gpresult to see what Group Policies are being applied to the
computer and then investigate those Group Policies to see if they have that
user right configured. --- Steve

Hi,

I've posted this previously in the AD group, but it is not solved.

We have a single Win2k domain with multiple sites, all DC's have SP4
installed. On one site only, any user not a member of local admins or a
domain admin cannot shutdown a machine. When you click start/shutdown,
the
only option on the 'shut down windows' drop down box is 'logoff'

I have had a real good look in the policies but cannot find anything that
looks like it may be casuing this, as I say it's only on one site. Anuone
have any ideas?