RE: Remove "Shutdown" command from w2k PCs but enable restart

From: Lett, Craig (Craig.Lett_at_usfc.com)
Date: 10/29/04

  • Next message: Donald Voss: "Re: Remove "Shutdown" command from w2k PCs but enable restart" 
    To: "Houpt, Dani" <dhoupt@ICBNY.COM>
Date: Fri, 29 Oct 2004 10:18:31 -0400

    Your probably going to see them just use the power button if you did
    that anyways. And if they were missing a shutdown button, the mentality
    of an end user, would probably be to call you or the helpdesk trying to
    report a virus or at least wondering where it went. Why don't you push
    the updates out when they login in the morning. That's when most of the
    places I have seen do updates, asset management, etc... The user logs
    on and goes for their morning coffee. Or you could just send a memo
    saying to leave their PC's on when they go home at night. ;)

       Craig Lett
        Security Administrator
        IT Security Services

        USF Technology Services
        630 Kenmoor Ave SE, Suite 200
        Grand Rapids, MI 49546

        craig.lett@usfc.com

    -----Original Message-----
    From: Houpt, Dani [mailto:dhoupt@ICBNY.COM]
    Sent: Thursday, October 28, 2004 3:49 PM
    To: focus-ms@securityfocus.com
    Subject: Remove "Shutdown" command from w2k PCs but enable restart

    We have a Windows 2000 AD environment and want to restrict our PC users
    from shutting off their PCs so we can send out OS/AV patches at night.
    We created a GPO to do this but it also blocks them from restarting.

    Many times, issues on PCs are resolved even before the users call the
    helpdesk by rebooting, so we don't want to remove that ability from
    them.

    Does anyone know a way that we can remove "Shutdown" while still allow
    "Restart"?

    I opened a case with MS about this and the rep said that he didn't
    think that it could be done.

    Thanks,
    -Dani
    INDEPENDENCE COMMUNITY BANK CONFIDENTIALITY NOTICE: This message
    (and any attachment) is confidential and
    intended for the sole use of the individual or entity to which it is
    addressed. If you are
    not the intended recipient, you must not review, retransmit, convert to
    hard-copy,
    copy, use or disseminate this email or any of its attachments. If you
    received this email
    in error, please notify the sender immediately and delete it. This
    notice is automatically
    appended to all Internet email.

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
---
-------------------------------------------------------------------------------------
This e-mail is the exclusive, private and confidential property of the sender. The
information contained in it is intended solely for the use of the sender and the
intended recipient. If you are not the intended recipient you are hereby advised that
any unauthorized disclosure, copying, distribution or the taking of any action in
reliance on the contents of this message is strictly prohibited. If you have received
this e-mail in error, please notify us immediately by telephone (call the USF
Corporation Technical Support Center at 1-800-753-4563) and then destroy this
document and any copies in any form immediately.  Finally, the recipient should
check this email and any attachments for the presence of viruses. USF Corporation
accepts no liability for any damage caused by any virus transmitted by this email.
-------------------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: Donald Voss: "Re: Remove "Shutdown" command from w2k PCs but enable restart"
    • Quantcast