Question about group policy settings

FireStormX86

Member
Jan 18, 2005
40
0
0
On our network it currently setup so that in order to shut down your machine you have to FIRST click start, and then log off. You cannot select shut down without doing this first. I'm guessing some sort of policy is in place that is forcing this...does anyone know which it may be or how I would go about changing this?
 

imagoon

Diamond Member
Feb 19, 2003
5,199
0
0
Are you're saying you need to log off then click the shutdown button on the logon box? If so there are settings in GPO that can prevent a user from shutting a machine down. It is just strange that they would leave the logon box shutdown button on if that was the goal however. Shutdown it one of the 'user rights assignments.'

If you're on a domain, find the policy that is disabling shutdown for users and put it back to stock. In a workgroup it would be in the local security policy.
 

FireStormX86

Member
Jan 18, 2005
40
0
0
I'm on a domain...and I don't know why it's setup this way. The previous network admin didn't seem to know what he was doing. Do you happen to know which policy it would be under?
 
Last edited:

yinan

Golden Member
Jan 12, 2007
1,801
2
71
Where I work does this too. It only disables the GUI however, you can still shutdown by typing shutdown -s -t 0.
 

FireStormX86

Member
Jan 18, 2005
40
0
0
Where I work does this too. It only disables the GUI however, you can still shutdown by typing shutdown -s -t 0.

My gui isn't disabled. I can still click the "shut down" button on the start menu; however it just prompts me to log off instead.
 

FireStormX86

Member
Jan 18, 2005
40
0
0
All the clients are running XP Pro...as for the server...I'm not entierly sure, as I don't have access to it. I'm just doing some researching. I want to say its 2003 if not 2007?
 

imagoon

Diamond Member
Feb 19, 2003
5,199
0
0
GPO:

User configuration > Admin template > Start Menu and Taskbar > Remove and prevent access to Shutdown, Restart, sleep and Hibernation commands.

Set state to disabled. Give the machines 1-3 hours to poll for GPO updates, or to a gpupdate /force and reboot.

Older XP/2k3 verbiage is a bit different but close enough to find it.
 
Last edited:

FireStormX86

Member
Jan 18, 2005
40
0
0
GPO:

User configuration > Admin template > Start Menu and Taskbar > Remove and prevent access to Shutdown, Restart, sleep and Hibernation commands.

Set state to disabled. Give the machines 1-3 hours to poll for GPO updates, or to a gpupdate /force and reboot.

Thank you! :)