Re: Users on 1 site cannot shutdown

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 10/24/05 

Date: Mon, 24 Oct 2005 12:51:02 -0500

Open Local Security Policy [secpol.msc] on one of those computer to see what
the user right for shutdown the system has for users/groups. For Windows
2000 computer check both the local and effective setting. If the local
setting is different than the effective setting then a domain/OU level Group
Policy is enforcing that user right. For Windows XP Pro/2003 computers if
you can not configure that user right in Local Security Policy then there is
a domain/OU level Group Policy enforcing the setting. You would have to run
the Resultant Set of Policy mmc snapin on an XP Pro computer to see what
Group Policy is applying the setting and for Windows 2000 you could use the
support tool gpresult to see what Group Policies are being applied to the
computer and then investigate those Group Policies to see if they have that
user right configured. --- Steve

"Andrew Story" <andrewDOTstoryATjameswalkerDOTbiz> wrote in message
news:O0xPH%23J2FHA.464@TK2MSFTNGP15.phx.gbl...
> Hi,
>
> I've posted this previously in the AD group, but it is not solved.
>
> We have a single Win2k domain with multiple sites, all DC's have SP4
> installed. On one site only, any user not a member of local admins or a
> domain admin cannot shutdown a machine. When you click start/shutdown,
> the
> only option on the 'shut down windows' drop down box is 'logoff'
>
> I have had a real good look in the policies but cannot find anything that
> looks like it may be casuing this, as I say it's only on one site. Anuone
> have any ideas?
>
>

Relevant Pages

  • Re: GP errors
    ... Then later shutdown second one and start the first one. ... machine (MTCCSAPROUTER) to the domain and those errors are not coming. ... The policy for which it is giving access denied error is the Default ... Windows cannot query for the list of Group Policy objects. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cant diable Ctrl+Alt+Del requirement in User Accounts
    ... the Local Security Policy Snapin does not exist in XP Home. ... MS-MVP Windows Media Center\Windows Powered Smart Display ... > panel in classic view but when I click on user accounts, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Remove Shutdown button from computer
    ... Prevents users from shutting down or restarting Windows. ... removes the Shut Down option from the Start menu and disables the Shut Down ... > This works fine for me, when this policy is enabled. ... >> I have set my shutdown policy, ...
    (microsoft.public.windows.group_policy)
  • Re: need to set the local policy security to enables the plain text password
    ... GPEDIT does not exist in XP Home, nor does the Local Security Policy Snap ... Look in the right pane for EnablePlainTextPassword It needs to be set to 1 ... MS-MVP Windows XP/ Windows Smart Display ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local security policy on Windows server 2003 domain controller
    ... Anything defined higher up in the policy chain has ... precedence over the local security policy. ... policy in the domain called default domain controllers security policy. ... > So this means that the settings in the Local Security policy are disabled by> default, ...
    (microsoft.public.windows.server.general)