Re: Remove "Shutdown" command from w2k PCs but enable restart
From: Miroslaw Slawek Chorazy (mchorazy_at_depaul.edu)
Date: 10/29/04
- Previous message: Donald Voss: "Re: Remove "Shutdown" command from w2k PCs but enable restart"
- Maybe in reply to: Martin Mewes: "Re: Remove "Shutdown" command from w2k PCs but enable restart"
- Next in thread: Babar Shafiq Nazmi: "Re: Remove "Shutdown" command from w2k PCs but enable restart"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 29 Oct 2004 12:03:28 -0500 To: <dhoupt@ICBNY.COM>, <focus-ms@securityfocus.com>
While there is another thread about alternative methods of shutting
down, I too had debated whether or not to leave the computers on
overnight in order to perform updates.
I think leaving the computers on 24/7 is a bad idea because it is
similar in a sens of leaving door to your network ajar.
There are still good methods of applying patches or installing managed
programs in timely intervals if you don't do it overnight.
For instance, the Group Policy Intellimirror is super helpful for
installing MSI kind of programs that you want to mandate everyone to
have now or in the future and you require it to run when Group Policies
are applied... for instance SMS 2003 Client.
You can then use SMS 2003 Software Update feature to really build a
robust and flexible patch inventory and deployment schedule.
Slawek
>>> "Houpt, Dani" <dhoupt@ICBNY.COM> 10/28/2004 14:48 >>>
We have a Windows 2000 AD environment and want to restrict our PC users
from shutting off their PCs so we can send out OS/AV patches at night.
We created a GPO to do this but it also blocks them from restarting.
Many times, issues on PCs are resolved even before the users call the
helpdesk by rebooting, so we don't want to remove that ability from
them.
Does anyone know a way that we can remove "Shutdown" while still allow
"Restart"?
I opened a case with MS about this and the rep said that he didn't
think that it could be done.
Thanks,
-Dani
INDEPENDENCE COMMUNITY BANK CONFIDENTIALITY NOTICE: This message
(and any attachment) is confidential and
intended for the sole use of the individual or entity to which it is
addressed. If you are
not the intended recipient, you must not review, retransmit, convert to
hard-copy,
copy, use or disseminate this email or any of its attachments. If you
received this email
in error, please notify the sender immediately and delete it. This
notice is automatically
appended to all Internet email.
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
- Previous message: Donald Voss: "Re: Remove "Shutdown" command from w2k PCs but enable restart"
- Maybe in reply to: Martin Mewes: "Re: Remove "Shutdown" command from w2k PCs but enable restart"
- Next in thread: Babar Shafiq Nazmi: "Re: Remove "Shutdown" command from w2k PCs but enable restart"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|