Re: Users on 1 site cannot shutdown

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 10/24/05 

Date: Mon, 24 Oct 2005 07:54:54 -0700

So, you are sure that the user right to shutdown the machine is not
being controlled in any GPO that impacts machines of that site?
If so, are you sure, if GPO is leaving this not configured, that machines
of the site have not had this set in local policy?

"Andrew Story" <andrewDOTstoryATjameswalkerDOTbiz> wrote in message
news:O0xPH%23J2FHA.464@TK2MSFTNGP15.phx.gbl...
> Hi,
>
> I've posted this previously in the AD group, but it is not solved.
>
> We have a single Win2k domain with multiple sites, all DC's have SP4
> installed. On one site only, any user not a member of local admins or a
> domain admin cannot shutdown a machine. When you click start/shutdown,
> the
> only option on the 'shut down windows' drop down box is 'logoff'
>
> I have had a real good look in the policies but cannot find anything that
> looks like it may be casuing this, as I say it's only on one site. Anuone
> have any ideas?
>
>

Relevant Pages

  • Re: Prevent logons other than PC owner?
    ... log on rights in local policy rather than by GPO. ... limiting all accounts without fail). ... >> In a domain Users includes Domain Users, ...
    (microsoft.public.windows.server.security)
  • Re: Last Logged-on User
    ... We have a GPO to clear the last logged in user and it does not block SMS or ... GPO, that would explain why only local admins show up--it's before GPO is ... "Garth" wrote: ...
    (microsoft.public.sms.admin)
  • Re: Deploy a local policy
    ... Get a GPO defined and linked to your OU and write of its ... by being innovative or by visiting 600 machines. ... being controlled by AD based GPO policy settings. ... > I need to change the local policy of all my computers in my domain. ...
    (microsoft.public.win2000.security)
  • RE: Create user that dont have access to domain
    ... Through a GPO or local policy? ... It is not a good idea to have generic logins in any environment. ... apply a very restrictive GPO that restricts their access to browsing and ... Local policy settings for Windows XP: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Can not find DC
    ... and you wanted to edit a GPO after shutdown of the PDC ... when editing a GPO the PDC FSMO is always targeted by default (to ...
    (microsoft.public.windows.server.active_directory)