Disabling shutdown in Terminal Services 2

[jasonsas]

HI,
We are currently running a Windows 2003 server with Terminal services installed. This is a stand alone machine and as such is not a domain controller and does not have active directory installed. Is there a way to disable the shutdown option when a user logs in to terminal services?
Thanks

 

[davidwilson11]

Is the server running in application mode or in admin mode.

 

[Odissey]

Try do: Start->Run->gpedit.msc->OK
Under User Configuration, Administrative Templates, Start Menu & Taskbar, there is a policy to 'Removee and prevent access to the Shut Down command.'



vadimp@yandex.ru

 

[Jpoandl]

You can open the Terminal Services Configuration utility and right click the RDP-TCP connection. Click the Permissions tab and then set the NT GROUP that you want to give terminal session access to the GUEST access. As guest, they will not be allowed to reboot.

-hope this helps..

Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[jasonsas]

Odissey > The policy to 'Remove and prevent access to the Shut Down command' is good, except it also disables the Administrator from shutting down the server!

Jpoandl > I went into the properties of the RDP-TCP connection, allowed "remote desktop users" group to only have "guest" access, but when I login as members of this group, they still have the shutdown option available....

 

[alichamberlain]

Go to Local Security Policy | User Rights Assignment and the option Shut Down the System, and make sure the Users group is not there. They will still get the Shut Down option on the menu but once they click Shut Down, they will only be given the option to Disconnect or Log off.

(If you find a way of removing the shut down button without prevent adminstrator access to it please post it here. I would prefer to do it that way too!)

 

[Zelandakh]

Ali,
Go to that place you said and remove ALL groups except for Administrators.

Then they don't get the Shut Down option at all unless they are admins.

I made this mistake on my first TS build and will never forget it - when there are a few users running TS and you are at home, it is very tedious to have to go to the office just to turn on the server!

 

[alichamberlain]

Yeah Zelandakh that does make sense. The only reason I didn't say that is because I have the Backup Operators group in there by default and thought that may be required for something. Obviously don't want any normal users to be able to shutdown the server!!