Disable the shut down button config issue "Fred Smith" <Fred[ at ]msoft.com> 12/19/2008 2:41:46 PM Hi, I currently have a multi server enviroment, one of the servers is a terminal service server. I looking to try and set up the server so thin client users cannot reboot or shut down the T/S server. I would normally roll out a policy across the board for all of the servers, but i want to be able to shut them down from their desktops. If i was to roll out a local policy on the T/S server, would it be "over ruled" by the domain policy? or is there a better way to achieve the result? TIA

Re: Disable the shut down button config issue "Florian Frommherz [MVP]" <florian[ at ]frickelsoft.DELETETHIS.net> 12/19/2008 5:58:38 PM Fred, Fred Smith wrote: [Quoted Text] > If i was to roll out a local policy on the T/S server, would it be "over > ruled" by the domain policy? or is there a better way to achieve the > result? Yes - if the domain policy would configure the same setting otherwise, it would overwrite the setting you made locally. Is there a policy already in place that removes the shutdown button? cheers, Florian -- Microsoft MVP - Group Policy eMail: prename [at] frickelsoft [dot] net. blog: http://www.frickelsoft.net/blog. Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

Re: Disable the shut down button config issue "Fred Smith" <Fred[ at ]msoft.com> 12/19/2008 6:45:25 PM Hi, yes there is a policy in place which i'm trying to reverse engineer. In short a policy has been put in place which shows the shut down button, but when you click it, the only option is to log off. All of the servers need to be able to be bounced by the administrator, and not adminstrators if that makes sense? What i'm looking to achieve is to only allow the local admin or domain admin to bounce the box, with all other users only being given the log off option as is. Cheers "Florian Frommherz [MVP]" <florian[ at ]frickelsoft.DELETETHIS.net> wrote in message news:%23qqEeOgYJHA.5108[ at ]TK2MSFTNGP05.phx.gbl... [Quoted Text] > Fred, > > Fred Smith wrote: >> If i was to roll out a local policy on the T/S server, would it be "over >> ruled" by the domain policy? or is there a better way to achieve the >> result? > > Yes - if the domain policy would configure the same setting otherwise, it > would overwrite the setting you made locally. Is there a policy already in > place that removes the shutdown button? > > cheers, > > Florian > -- > Microsoft MVP - Group Policy > eMail: prename [at] frickelsoft [dot] net. > blog: http://www.frickelsoft.net/blog. > Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

Re: Disable the shut down button config issue "Florian Frommherz [MVP]" <florian[ at ]frickelsoft.DELETETHIS.net> 12/20/2008 2:33:36 PM Fred, Fred Smith wrote: [Quoted Text] > Hi, yes there is a policy in place which i'm trying to reverse engineer. > > In short a policy has been put in place which shows the shut down > button, but when you click it, the only option is to log off. > All of the servers need to be able to be bounced by the administrator, > and not adminstrators if that makes sense? > > What i'm looking to achieve is to only allow the local admin or domain > admin to bounce the box, with all other users only being given the log > off option as is. I'm not the strongest source when it comes to Terminal Services but what you see seems to me working as designed. If you feel like there's a policy in place, you can use rsop.msc on the TS to see what policies it downloads and applies. cheers, Florian -- Microsoft MVP - Group Policy eMail: prename [at] frickelsoft [dot] net. blog: http://www.frickelsoft.net/blog. Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste