minimal privilages to log off other user

[djieon]

Hi all,

im an admin (the only one) on a windows 2000 terminal server box and I need to give someone else the ability to log off other users sessions but i dont want to give them full access rights to do this (ie dont want them to be able to 'accidentally' shut down the server etc..

does anyone know of a way of doing this? I gave them access to power user group and this was not enough, is there another way to just have them as a standard user with this one elevated privilidge?

thanks in advance...

 

[TechyMcSe2k]

They have to be admin. You could grant them admin rights, and then use gpedit.msc to edit the local security policy and change the security for those that can shutdown the server...but that is teadious. in 2003 your group policy can remove the shutdown buttons to help prevent this from happening.

Of course you can go old school and hack the registry to remove these buttons:

http://www.windowsnetworking.com/nt/registry/rtips114.shtml

_______________________________________
I hope any help I give leads to great successes.
MCSE, MCSA, MCTS, CCA, VCP, CCNA