I'm looking for a way to block the windows shutdown command from
working on some servers on our domain. I know it is possible as the
previous admin has it currently setup on a few. Despite being a domain
admin and the remote server being on the domain I get "Access is
denied" when running the shutdown command against it. I want to enable
this feature on other servers as well but I can't figure out how. I do
believe it is a registry setting on the remote server itself.

This is done in Group Policies, Computer Configuration, Windows Settings, Security Settings, Local Policies, User Rights Assignments

Force Shutdown from a remote system. The default is Adminstators. You can modify this to specific users or groups, or not have any groups/users listed to completely block this feature.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

<mrburch@gmail.com> wrote in message news:1135883790.482057.149550@f14g2000cwb.googlegr oups.com...
> I'm looking for a way to block the windows shutdown command from
> working on some servers on our domain. I know it is possible as the
> previous admin has it currently setup on a few. Despite being a domain
> admin and the remote server being on the domain I get "Access is
> denied" when running the shutdown command against it. I want to enable
> this feature on other servers as well but I can't figure out how. I do
> believe it is a registry setting on the remote server itself.
>

I tested it out on another users system today. On his system we removed
administrators from the Force Shutdown option and he added only
himself. Then I ran the shutdown command and it still shutdown his PC.
Any suggestions?

Doug Knox MS-MVP wrote:
> This is done in Group Policies, Computer Configuration, Windows Settings, Security Settings, Local Policies, User Rights Assignments
>
> Force Shutdown from a remote system. The default is Adminstators. You can modify this to specific users or groups, or not have any groups/users listed to completely block this feature.
>
> --
> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
> Win 95/98/Me/XP Tweaks and Fixes
> http://www.dougknox.com
> --------------------------------
> Per user Group Policy Restrictions for XP Home and XP Pro
> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> --------------------------------
> Please reply only to the newsgroup so all may benefit.
> Unsolicited e-mail is not answered.
>
> <mrburch@gmail.com> wrote in message news:1135883790.482057.149550@f14g2000cwb.googlegr oups.com...
> > I'm looking for a way to block the windows shutdown command from
> > working on some servers on our domain. I know it is possible as the
> > previous admin has it currently setup on a few. Despite being a domain
> > admin and the remote server being on the domain I get "Access is
> > denied" when running the shutdown command against it. I want to enable
> > this feature on other servers as well but I can't figure out how. I do
> > believe it is a registry setting on the remote server itself.
> >

Did you reboot after applying the changes? That's the only suggestion I have, at this point.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

<mrburch@gmail.com> wrote in message news:1135958544.732749.34550@g43g2000cwa.googlegro ups.com...
>I tested it out on another users system today. On his system we removed
> administrators from the Force Shutdown option and he added only
> himself. Then I ran the shutdown command and it still shutdown his PC.
> Any suggestions?
>
> Doug Knox MS-MVP wrote:
>> This is done in Group Policies, Computer Configuration, Windows Settings, Security Settings, Local Policies, User Rights Assignments
>>
>> Force Shutdown from a remote system. The default is Adminstators. You can modify this to specific users or groups, or not have any groups/users listed to completely block this feature.
>>
>> --
>> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
>> Win 95/98/Me/XP Tweaks and Fixes
>> http://www.dougknox.com
>> --------------------------------
>> Per user Group Policy Restrictions for XP Home and XP Pro
>> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
>> --------------------------------
>> Please reply only to the newsgroup so all may benefit.
>> Unsolicited e-mail is not answered.
>>
>> <mrburch@gmail.com> wrote in message news:1135883790.482057.149550@f14g2000cwb.googlegr oups.com...
>> > I'm looking for a way to block the windows shutdown command from
>> > working on some servers on our domain. I know it is possible as the
>> > previous admin has it currently setup on a few. Despite being a domain
>> > admin and the remote server being on the domain I get "Access is
>> > denied" when running the shutdown command against it. I want to enable
>> > this feature on other servers as well but I can't figure out how. I do
>> > believe it is a registry setting on the remote server itself.
>> >
>