RE: Remove "Shutdown" command from w2k PCs but enable restart

• Previous message: Miroslaw Slawek Chorazy: "Re: Remove "Shutdown" command from w2k PCs but enable restart"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: focus-ms@securityfocus.com
Date: Fri, 29 Oct 2004 10:56:19 -0600

Not a bad workaround, but unfortunately by Dani's description the help desk
would have to field these calls instead of their users able to reboot on
their own to see if the problem they were having was correctable this way.
You could make a desktop icon for the users to use this restart utility but
I think you need admin priv's to run it.

If you had a management utility that told you when a system was down
(couldn't be contacted) you could generate a report of offending users and
chase after them to only restart a system at night. This is a less
technical approach but it may be your best way to do it without implementing
WOL.

-----Original Message-----
From: Donald Voss [mailto:voss@albany.edu]
Sent: October 29, 2004 2:43 AM
To: Houpt, Dani
Cc: focus-ms@securityfocus.com
Subject: Re: Remove "Shutdown" command from w2k PCs but enable restart

Dani,

I use the command line shutdown for the few machines that I have removed
the the shutdown gui. Xp units.

SHUTDOWN -r -t 10 Delayed reboot Reboot after a 10 seconds delay.

Can be stopped during those 10 seconds using SHUTDOWN -a

SHUTDOWN -s -t 01 Delayed shutdown Shutdown after a 1 second delay, NO
power off.

If you block the run command .. a script with Icon .. run as xyz as needed.

Shutdown.exe is in the XP material and is part of the Win2k Resource Kit
for win2k.

or

http://www.sysinternals.com/ntw2k/freeware/psshutdown.shtml

I also adjusted the bios power on options to deal with a power outage ..
when one wants a unit to stay on 24x7.

/don

Houpt, Dani wrote:
> We have a Windows 2000 AD environment and want to restrict our PC
> users
> from shutting off their PCs so we can send out OS/AV patches at night.
> We created a GPO to do this but it also blocks them from restarting.
>
> Many times, issues on PCs are resolved even before the users call the
> helpdesk by rebooting, so we don't want to remove that ability from
> them.
>
> Does anyone know a way that we can remove "Shutdown" while still allow
> "Restart"?
>
> I opened a case with MS about this and the rep said that he didn't
> think that it could be done.
>
> Thanks,
> -Dani
> INDEPENDENCE COMMUNITY BANK

[snipped] silly CONFIDENTIALITY NOTICE: ...
  --

______________________________________________________________
Donald W. Voss voss@albany.edu
Sr.Systems Analyst
AS218 Geography Department
The University at Albany
Albany, NY, USA 12222

1 kilometer = 11,248.593925759280089988751406074 cups of coffee.

---------------------------------------------------------------------------
---------------------------------------------------------------------------
Please note that Internet email is not always private, secure or reliable.
The sender accepts no liability for any damages caused by any virus
inadvertently transmitted with this email. Any opinion expressed in this
email is solely that of the author, unless clearly indicated otherwise.
This email, and any attachments, may contain confidential and/or proprietary
information that is intended only for use by the addressee. If you are not
the intended recipient, any use, dissemination, forwarding, printing, or
copying of this email is strictly prohibited. If you received this email in
error, please delete the email and advise the sender of the delivery error.

---------------------------------------------------------------------------
---------------------------------------------------------------------------

• Previous message: Miroslaw Slawek Chorazy: "Re: Remove "Shutdown" command from w2k PCs but enable restart"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]