In a peer-to-peer environment where workstations share their resources, users can cause havoc by shutting down their Windows 2000 computers at the end of the day. Other users might need to access files or printers, the computer may be handling incoming faxes, or it might be acting as an Internet Connection Sharing computer that allows others to access the Internet. Taking these systems down will disrupt all such functions. But you can save yourself and your users time and effort by simply preventing the workstations from shutting down. Here are a few ways to go about it.
Preventing shutdown at the local level
Members of the Users, Power Users, Backup Operators, and Administrators groups can shut down the computer by default. To restrict this ability through group policies, apply the policy at the site, domain, organizational unit (OU), or local level. To set it at the local level, open the Local Security Policy console from the Administrative Tools folder located in the Control Panel. Open the Security Settings\Local Policies\User Rights assignment branch. Double-click the policy Shut Down The System and clear the Local Policy Setting check box for those groups that you don't want shutting down the system (see Figure A). You can click Add to add other groups and grant them the ability to shut down the system if needed.
Preventing shutdown at the site level
You can also apply the group policy at higher levels. To apply it at the site level, open the Active Directory Sites And Services console on a domain controller. Right-click the site, choose Properties, and then click the Group Policy tab. Select (or create) a policy, click Edit, and open the Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights assignment to locate the Shut Down The System policy. Use the Active Directory Users And Computers console to configure policies at the domain or OU levels.
Be a better administrator
Check out these other TechRepublic articles and columns for more helpful information on Windows 2000 administration:
- "Polish your Windows 2000 administration skills with these tips"
- "Can't log on to Windows 2000? Check your user rights"
- "Apply local Windows 2000 restrictions with the Group Policy console"
- "Shorten logon time for Windows 2000 roaming profiles"
- "Avoid newbie confusion: Rename the Windows Recycle Bin"