RE: Remove "Shutdown" command from w2k PCs but enable restart

From: James D. Stallard (james_at_leafgrove.com)
Date: 10/29/04

  • Next message: Steven Hay: "RE: GPO that forces users to use a proxy server." 
    To: <focus-ms@securityfocus.com>
Date: Fri, 29 Oct 2004 14:03:21 +0100

    Dani

    You aren't the first to ask this one and no doubt you wont be the last :)

    The fact is a restart comprises a shutdown and reboot - and if a user wants
    to shut a machine down, they will simply push (and hold) the power button.

    There is no group policy setting that would support this and I suspect that
    the feature will not be offered in a near-future service/feature pack. We
    may yet see something of the like in Longhorn, but I shan't be holding my
    breath.

    For what it's worth, I did once try to create a GPO based shutdown script
    that used SHUTDOWN.EXE /A to abort the shutdown process and then
    SHUTDOWN.EXE /R to restart, but it appears that the point at which the
    shutdown script is run, is too far along the shutdown process to abort and
    the /A command has no effect. So, the script ran perfectly - it just had no
    effect. Rather a hair-brained idea I'm sure you'll agree!

    Regards

    James D. Stallard

    -----Original Message-----
    From: Houpt, Dani [mailto:dhoupt@ICBNY.COM]
    Sent: 28 October 2004 20:49
    To: focus-ms@securityfocus.com
    Subject: Remove "Shutdown" command from w2k PCs but enable restart

    We have a Windows 2000 AD environment and want to restrict our PC users from
    shutting off their PCs so we can send out OS/AV patches at night.
    We created a GPO to do this but it also blocks them from restarting.
     
    Many times, issues on PCs are resolved even before the users call the
    helpdesk by rebooting, so we don't want to remove that ability from them.
     
    Does anyone know a way that we can remove "Shutdown" while still allow
    "Restart"?
     
    I opened a case with MS about this and the rep said that he didn't think
    that it could be done.
     
    Thanks,
    -Dani
    INDEPENDENCE COMMUNITY BANK CONFIDENTIALITY NOTICE: This message (and any
    attachment) is confidential and intended for the sole use of the individual
    or entity to which it is addressed. If you are not the intended recipient,
    you must not review, retransmit, convert to hard-copy, copy, use or
    disseminate this email or any of its attachments. If you received this email
    in error, please notify the sender immediately and delete it. This notice is
    automatically appended to all Internet email.

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Steven Hay: "RE: GPO that forces users to use a proxy server."
    • Quantcast