Vanguard47

We have a Windows terminal server at work. Some remote users are accidently shutting down the server when they log off (picking shutdown instead of log off). I am wondering if there is a way to track which logon is responsible for the shutdown? I did have a policy that blocked access to the shutdown feature, but it stopped working when we upgraded to Active Directory, but that is a different problem for a different day. Thanks for any suggestions.

I recently assembled a new system. Since I do not have Internet access at home, I initially set up the machine at work in order to download Windows updates and other stuff. While doing this, the computer was a member of the work domain. When I took the machine home I changed it from the work domain to my home workgroup. Everything seemed to be fine, with the exception of being able to access my second hard drive. When I click on the drive letter inside of Windows Explorer I am told that access is denied. Properties for the drive list RAW as the file format. The drive shows up is Disk Management and is listed as healthy. All options such as Reactivate are grayed out. The only option that isn't is the Format Drive. I hestiate to do this as I have about 20 GB of data I don't want to lose. Disk Management let me change the drive letter designation but nothing else. I am confused as to why this would happen when I did nothing more than change from a domain to a workgroup. Any suggestions would be appreciated. Thanks.