RE: Account Permissions

From: Ingersoll, Jared (jared@cswv.com)
Date: 04/29/02 

From: "Ingersoll, Jared" <jared@cswv.com>
To: 'Bill Mote' <bill.mote@bigfoot.com>, focus-ms@securityfocus.com
Date: Mon, 29 Apr 2002 15:11:50 -0400

I found that using the "shutdown" utility (NT4, 2K must have an equivalent)
from a remote box (perhaps one in the data center) works great, but make
sure you either use the proper switch to blow through any application that
may be hanging, or edit you registry(ies) to do so on shutdown (search MS
KB). If the machine is beyond responding to this utility, a cold boot is
usually the only option anyway. I would never give a data center tech a
login names/passwd out of principle, those guys are goons... (just kidding).

jared

-----Original Message-----
From: Bill Mote [mailto:bill.mote@bigfoot.com]
Sent: Monday, April 29, 2002 1:32 PM
To: focus-ms@securityfocus.com
Subject: Account Permissions

Background: We have our equipment hosted remotely in a data center.

Question: What is the minimum account privileges/permissions/policies I can
give to allow a data center technician to login and reboot my Windows 2000
server? If possible I'd even restrict them to 'reboot' vs. 'shutdown', but
that'd be gravy.

The current alternative is to have the data center technician hard power the
box. That works but it sure isn't graceful =)

TIA,

bm

Relevant Pages

  • Re: Shutting down windows NT remotely (without winnt toolkit)?
    ... AFAIK the services still start after a reboot. ... The log off works, but the shutdown doesn't. ... So is it impossible to remotely shutdown a default install NT ... installations don't make remote shutdowns easy (just remote crash/root doh! ...
    (Vuln-Dev)
  • Re: Remove shutdown in remote desktop
    ... shutdown option when they connect to their workstations at the office." ... I did do a remote ... Shutdown inside of it. ... Remote Desktop session I'm not aware of a way to accomplish that so that it ...
    (microsoft.public.windows.server.sbs)
  • Re: Block windows remote shutdown command on a domain
    ... This is done in Group Policies, Computer Configuration, Windows Settings, Security Settings, Local Policies, User Rights Assignments ... Force Shutdown from a remote system. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: total newbie question
    ... As you said "Remote shutdown or anything else it ... I can trade files very easily, I have established a Internet connection ... Both Say I have Admin Rights But when I try to use ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: BackgroundWorker in .NET CF 2.0
    ... It sounds like your ShutDown method isn't really getting rid of the threads. ... Use the Remote Process Viewer from the Remote Tools menu under the Visual Studio menu from your Start menu. ... This seems to work ok...however when I kill the application, ... I learned the hard way about the MinimizeBox property on CF forms. ...
    (microsoft.public.dotnet.framework.compactframework)