Windows NT Enable logon shutdown button

  • Thread starter Thread starter Wayne Gore
  • Start date Start date
W

Wayne Gore

Hi

I want to enable the "Shutdown" button on my domain controllers (don't ask
why) to a number of administrators who are not in the domain admins group.
The will connect to the server using Terminal Sevices.

I have altered the Domain Controller GPO with the following settings:

Computer configuration\Windows Settings\Local Policies\Security
Option\Shutdown: Allow system to be shut down without having to log on =
ENABLED

Computer configuration\Windows Settings\Local Policies\User Rights
Assigment\Shut down the system = Here I added the user accounts in question.

The problem is that these settings only enables the "Shutdown" button for
the console (however not if you connect with TS /Console) but not for a
Terminal Server Session.

I also tried to edit the registry by changing the following value to "1":

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\ShutdownWithoutLogon

That didn't help either.

Any ideas?

Regards
Wayne
 
Can you please check your group policy (gpedit.msc) under User
Configuration->Administrative Templates->Start Menu and Taskbar "Remove and
prevent access to the Shut Down Command" is enabled?
If your machine is joined to a domain, you may also need to check from your
domain controller "Active Directory Users and Computers"
Thanks
Soo Kuan


--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Wayne Gore" <WayneGore@discussions.microsoft.com> wrote in message
news:C71B14B6-EE5F-4F94-BD43-8F9EF979AEEC@microsoft.com...
> Hi
>
> I want to enable the "Shutdown" button on my domain controllers (don't ask
> why) to a number of administrators who are not in the domain admins group.
> The will connect to the server using Terminal Sevices.
>
> I have altered the Domain Controller GPO with the following settings:
>
> Computer configuration\Windows Settings\Local Policies\Security
> Option\Shutdown: Allow system to be shut down without having to log on =
> ENABLED
>
> Computer configuration\Windows Settings\Local Policies\User Rights
> Assigment\Shut down the system = Here I added the user accounts in
> question.
>
> The problem is that these settings only enables the "Shutdown" button for
> the console (however not if you connect with TS /Console) but not for a
> Terminal Server Session.
>
> I also tried to edit the registry by changing the following value to "1":
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\Winlogon\ShutdownWithoutLogon
>
> That didn't help either.
>
> Any ideas?
>
> Regards
> Wayne
 
Hi

Thanks for you reply.

As I mentioned in my inital posting:

- it is on the domain controllers I want it enabled
- it is in the Terminal Server sessions in at Logon prompt that I want to
enable it.

Cheers
Wayne

"Soo Kuan Teo [MSFT]" wrote:

> Can you please check your group policy (gpedit.msc) under User
> Configuration->Administrative Templates->Start Menu and Taskbar "Remove and
> prevent access to the Shut Down Command" is enabled?
> If your machine is joined to a domain, you may also need to check from your
> domain controller "Active Directory Users and Computers"
> Thanks
> Soo Kuan
>
>
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Wayne Gore" <WayneGore@discussions.microsoft.com> wrote in message
> news:C71B14B6-EE5F-4F94-BD43-8F9EF979AEEC@microsoft.com...
> > Hi
> >
> > I want to enable the "Shutdown" button on my domain controllers (don't ask
> > why) to a number of administrators who are not in the domain admins group.
> > The will connect to the server using Terminal Sevices.
> >
> > I have altered the Domain Controller GPO with the following settings:
> >
> > Computer configuration\Windows Settings\Local Policies\Security
> > Option\Shutdown: Allow system to be shut down without having to log on =
> > ENABLED
> >
> > Computer configuration\Windows Settings\Local Policies\User Rights
> > Assigment\Shut down the system = Here I added the user accounts in
> > question.
> >
> > The problem is that these settings only enables the "Shutdown" button for
> > the console (however not if you connect with TS /Console) but not for a
> > Terminal Server Session.
> >
> > I also tried to edit the registry by changing the following value to "1":
> >
> > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> > NT\CurrentVersion\Winlogon\ShutdownWithoutLogon
> >
> > That didn't help either.
> >
> > Any ideas?
> >
> > Regards
> > Wayne
>
>
 
Did you check your group policy to confirm that it is setup correctly.
that's what he was talking about. You may have prevented shut down
through gpo which means you need to reverese for those particular users.


Wayne Gore wrote:
> Hi
>
> Thanks for you reply.
>
> As I mentioned in my inital posting:
>
> - it is on the domain controllers I want it enabled
> - it is in the Terminal Server sessions in at Logon prompt that I want to
> enable it.
>
> Cheers
> Wayne
>
> "Soo Kuan Teo [MSFT]" wrote:
>
>> Can you please check your group policy (gpedit.msc) under User
>> Configuration->Administrative Templates->Start Menu and Taskbar "Remove and
>> prevent access to the Shut Down Command" is enabled?
>> If your machine is joined to a domain, you may also need to check from your
>> domain controller "Active Directory Users and Computers"
>> Thanks
>> Soo Kuan
>>
>>
>> --
>> This posting is provided "AS IS" with no warranties, and confers no rights.
>>
>> "Wayne Gore" <WayneGore@discussions.microsoft.com> wrote in message
>> news:C71B14B6-EE5F-4F94-BD43-8F9EF979AEEC@microsoft.com...
>>> Hi
>>>
>>> I want to enable the "Shutdown" button on my domain controllers (don't ask
>>> why) to a number of administrators who are not in the domain admins group.
>>> The will connect to the server using Terminal Sevices.
>>>
>>> I have altered the Domain Controller GPO with the following settings:
>>>
>>> Computer configuration\Windows Settings\Local Policies\Security
>>> Option\Shutdown: Allow system to be shut down without having to log on =
>>> ENABLED
>>>
>>> Computer configuration\Windows Settings\Local Policies\User Rights
>>> Assigment\Shut down the system = Here I added the user accounts in
>>> question.
>>>
>>> The problem is that these settings only enables the "Shutdown" button for
>>> the console (however not if you connect with TS /Console) but not for a
>>> Terminal Server Session.
>>>
>>> I also tried to edit the registry by changing the following value to "1":
>>>
>>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
>>> NT\CurrentVersion\Winlogon\ShutdownWithoutLogon
>>>
>>> That didn't help either.
>>>
>>> Any ideas?
>>>
>>> Regards
>>> Wayne
>>
 
Back
Top