Re: Shutdown Utilities Do Not Work

From: Eric Perlin [MS] (ericperl@microsoft.com)
Date: 10/18/02 

From: "Eric Perlin [MS]" <ericperl@microsoft.com>
Date: Thu, 17 Oct 2002 18:20:32 -0700

Did you turn on simple file sharing? 

--
Eric Perlin [MS]
This posting is provided "AS IS" with no warranties, and confers no rights.
---
"Bill Burns" <laburns@attbi.com> wrote in message
news:5eac01c27639$ee4ca8d0$36ef2ecf@tkmsftngxa12...
> Turned on logon auditing to find that the target machine
> (syk7b) is recieving the shutdown.exe as a Guest logon
> account from the initiating machine (asusb).  Since I am
> logged on to the initiating asusb machine as
> administrator, I was surprised.
>
> To confirm the situation I changed the Local Security User
> Rights on "Force shutdown from a remote system" to include
> Guest along with Administrator that was already set.  The
> syk7b machine was then successfully shutdown from the
> asusb initiating machine.  Both assub and syk7b are XP
> Professional machines and in the same workgroup.  The
> shutdown.exe process initiated from asusb always presents
> itself as a Guest logon account whether from an XP shell
> window, a .cmd file, or from the run box under START.
>
> Since I only want to run shutdown under an administrator
> logon account on the target machine(s), is there a setting
> or methodology that that will achieve my objective?
>
> Thanks for the help.  Much appreciated.
>
> >-----Original Message-----
> >I can't reproduce this behavior.
> >If you turn logon auditing on the target (control
> panel/local policies/Audit
> >policy), you should see the network logon in the security
> eventlog.
> >Does it succeed?
> >
> >--
> >Eric Perlin [MS]
> >This posting is provided "AS IS" with no warranties, and
> confers no rights.
> >---
> >
> >"Bill Burns" <laburns@attbi.com> wrote in message
> >news:3dbd01c274ce$911c4830$3aef2ecf@TKMSFTNGXA09...
> >> The authentication is valid because both XP Professional
> >> machines in the workgroup have the same administrator
> user
> >> name and password.  Even tried logging on the target
> >> machine using a power user and then using the net use
> >> command followed by the shutdown command from the
> >> initiating machine - same result "Access Denied". The
> net
> >> use command execute correctly.  I would like to
> understand
> >> what is going on here.  Can you duplicate this
> sitaution?
> >>
> >> >-----Original Message-----
> >> >Are you authenticated as an admin on the machine you
> want
> >> to shutdown?
> >> >Prior to: shutdown -s -t 0 -m \\MachineA
> >> >Try: net use \\MachineA /u:MachineA\administrator
> >> <MachineA admin's password
> >> >here>
> >> >
> >> >--
> >> >Eric Perlin [MS]
> >> >This posting is provided "AS IS" with no warranties,
> and
> >> confers no rights.
> >> >---
> >> >
> >> >"Bill Burns" <laburns@attbi.com> wrote in message
> >> >news:332b01c27496$8f952d70$36ef2ecf@tkmsftngxa12...
> >> >> The shutdown.exe utility works on the computer it is
> >> >> initiated on (XP=shutdown -l or W2K=shutdown /L), but
> >> try
> >> >> a cross platform shut down from Windows 2000 to XP
> >> >> Professional (shutdown \\xxxxx /S) or XP
> Professional to
> >> >> XP Professional (shutdown -m \\yyyyy -s).  Cross
> >> platform
> >> >> shut downs work correctly from XP Professional to
> >> Windows
> >> >> 2000 Advanced Server and from W2K to W2K.
> >> >>
> >> >> Using two XP Professional machines I get "Access
> >> Denied".
> >> >> Only administrator accounts are logged on the XP
> >> >> Professional computers running in a workgroup.  The
> >> Local
> >> >> Security Policy for Local Users is set exactly the
> same
> >> on
> >> >> both XP Professional machines.  Local User Rights
> >> >> polices "Shut down the system" and "Force shutdown
> from
> >> a
> >> >> remote system" are set to Administrator.  The Local
> User
> >> >> Right "Deny access to this computer from the
> Network" is
> >> >> set to "SUPPORT_388945a0".
> >> >>
> >> >> Has anyone succeeded in what is described above, and
> if
> >> so,
> >> >> what are the Security Policy settings.
> >> >>
> >> >> >-----Original Message-----
> >> >> >Bill Burns wrote:
> >> >> >>
> >> >> >> The utilities shutdown.exe and nltest.exe do not
> work
> >> >> >> correctly across or within XP and Windows 2000
> >> >> >> environments.
> >> >> >>
> >> >> >> It seems starnge, but the version of shutdown.exe
> for
> >> >> >> Windows 2000 displays an error message box that
> >> relates
> >> >> >> one of the problems being that the target computer
> >> may
> >> >> not
> >> >> >> be an NT machine.
> >> >> >>
> >> >> >> What a mess Microsoft has created.  I'll look for
> a
> >> >> third
> >> >> >> party utility or write my own code.  Microsoft
> really
> >> >> >> knows how to waste our valuable time.
> >> >> >
> >> >> >Sorry, but it may be your system, as I'm not having
> >> >> >any problems with shutdown.exe (XP Professional).
> >> >> >
> >> >> >Larry
> >> >> >.
> >> >> >
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >

Relevant Pages

  • Re: Windows Task Scheduler looses account credentials data
    ... I double-checked the settings you pointed and found my user is a domain ... administrator and has all these rights to logon. ... User Rights Assignments ... Confirm that the administrator is not a part of the rights: "Deny logon ...
    (microsoft.public.windowsxp.general)
  • Windows 2000 Server Logon Problem
    ... I assume you have promoted this Win2k server to a domain ... On the server, logon with administrative rights ... Expand Local Policies-User Rights Assignments. ... >have them logon with anything less then Administrator ...
    (microsoft.public.win2000.setup)
  • Re: Cant logon to local machine (this computer) as administrator
    ... the logon locally or deny logon locally user right are configured to ... prevent administrator or local users from logging on locally. ... rights for the mentioned user rights. ... "effective" settings the policy came from a higher priority level such as domain and ...
    (microsoft.public.win2000.security)
  • Re: Win2008 rights
    ... but then Denying them specific rights in AD. ... Administrator they can always undo any restrictions which have been placed on ... "southpaw" wrote: ... the right to shutdown a DC? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cannot copy one particular user
    ... then maybe the use that I cannot copy is the Administrator. ... Logon as Administrator (not user with admin rights) and see ...
    (microsoft.public.windowsxp.security_admin)
Loading