Re: Users on 1 site cannot shutdown

From: Andrew Story (andrewDOTstoryATjameswalkerDOTbiz)
Date: 10/25/05

  • Next message: Ross Luker: "Bypass Domain GPO when not connected to network?" 
    Date: Tue, 25 Oct 2005 09:06:12 +0100

    Thanks for the responses guys, I'll run through your suggestions and post
    back the results.

    "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
    news:OjzSUOM2FHA.3924@TK2MSFTNGP14.phx.gbl...
    > Open Local Security Policy [secpol.msc] on one of those computer to see
    what
    > the user right for shutdown the system has for users/groups. For Windows
    > 2000 computer check both the local and effective setting. If the local
    > setting is different than the effective setting then a domain/OU level
    Group
    > Policy is enforcing that user right. For Windows XP Pro/2003 computers if
    > you can not configure that user right in Local Security Policy then there
    is
    > a domain/OU level Group Policy enforcing the setting. You would have to
    run
    > the Resultant Set of Policy mmc snapin on an XP Pro computer to see what
    > Group Policy is applying the setting and for Windows 2000 you could use
    the
    > support tool gpresult to see what Group Policies are being applied to the
    > computer and then investigate those Group Policies to see if they have
    that
    > user right configured. --- Steve
    >
    >
    > "Andrew Story" <andrewDOTstoryATjameswalkerDOTbiz> wrote in message
    > news:O0xPH%23J2FHA.464@TK2MSFTNGP15.phx.gbl...
    > > Hi,
    > >
    > > I've posted this previously in the AD group, but it is not solved.
    > >
    > > We have a single Win2k domain with multiple sites, all DC's have SP4
    > > installed. On one site only, any user not a member of local admins or a
    > > domain admin cannot shutdown a machine. When you click start/shutdown,
    > > the
    > > only option on the 'shut down windows' drop down box is 'logoff'
    > >
    > > I have had a real good look in the policies but cannot find anything
    that
    > > looks like it may be casuing this, as I say it's only on one site.
    Anuone
    > > have any ideas?
    > >
    > >
    >
    >

  • Next message: Ross Luker: "Bypass Domain GPO when not connected to network?"

    Relevant Pages

    • A way around domain group policy?
      ... I am a local admin for several workstations (Windows XP SP2) in my office. ... MMC snapin of Domain users etc and noticed that there are 3 group policies ... This policy sets up Windows update to use the companies' update server ... I started messing around with Registry settings to try and get around ...
      (microsoft.public.windows.group_policy)
    • Re: Group Policy permissions
      ... you cannot apply Group Policies to specific ... Administrator account from them. ... Apply Local Policies to all Users Except Administrators on Windows ... > Policy on a Windows XP Pro standalone laptop. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Lost Windows Key + E Functionality
      ... Remove programs on Settings menu (Windows XP) ... If you enable the policy that is listed in the "Summary" section of this ... How to Disable the "Windows Logo Key+E" Key Combination with Group Policies ... Control Panel, Printers, and Network and Dial-up Connections can run. ...
      (microsoft.public.windowsxp.general)
    • Group Policy not being applied
      ... I've created several group policies in our Windows 2003 AD domain, ... of our XP clients are able to apply the policy. ... Running GPresult produces ... Windows cannot obtain the domain controller name for your computer network. ...
      (microsoft.public.windows.group_policy)
    • Windows Shortcut Keys and "ALT+TAB" not working because of GPO
      ... We've got an issue with a machine policy which prohibits us of using Windows ... Deny access to this computer from the network Support_388945a0, ... Policy Setting ...
      (microsoft.public.de.german.windowsxp.gruppen.richtlinien)