Forum Discussion
Remote Desktop users have access to shutdown/restart, how disable these ?
- Oct 23, 2020
Hi Mehrdad1993,
I applied a group policy includes only "Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands" is on User Configuration of Group Policy Management.
Also I used the policy on User Configuration, didn't on Computer Configuration.
You have to apply the policy to OU which includes users, not computers.
Group Policy
Other User Clicked to Power ButtonOther User Clicked to User ButtonTest User Clicked to Power ButtonTest User Clicked to User Button
hasanemresatilmis Note that this affects only the GUI options. The user still can shutdown the system from command line or third-party application.
To prevent more resourceful users from shutting down the system, remove their right to do so. Still in gpedit.msc, go to Computer Configuration / Windows Settings / Security Settings / Local Policies / User Rights Assignment, edit the "Shut down the system" privilege and remove "Users" from the list.
Hi JanRingos,
Thanks for your completion. When this is added to the policy I mentioned earlier, the result will be as follows in the command prompt.
@Mehrdad1993, is your problem completely solved?
- Mehrdad1993Oct 24, 2020Copper Contributori found problem, seems i had changed this policy:
default domain controller policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Shut down the system
i add "everyone" and "users" to this policy and now users have access to shutdown and restart, with removing these two groups users will lost access to shutdown button.
this policy doesn't work with gpupdate /force command and server restart is needed.
now its time to try hasanemresatilmis solution.- Mehrdad1993Oct 24, 2020Copper Contributor
Operation was successfully
Thank you All.
- Oct 24, 2020