preventing users running Shutdown.exe

Hi,
there is a group policy setting 'force shutdown from a remote system' within the computer config \ security settings \ local policies \ user rights assignment area that can be applied via active directory (if in a win2k domain) or locally on each machine. Frankly though, if you are going to make users admins then what did you expect? far better to open security up only as much as needed....

Users, do not need admin rights for certain programs to work... Find out what registry keys in regedt32, and modify them to all users on that local machine. Put them back to power user.

Otherwise, you must use the group policy and modify the users rights.

The last thing, if someone is remotely shutting down other people's systems... it is very easy to find out who. On the machine that was remotely shutdown, go into the event viewer... You will see computer \\domain\dummy sent shutdown request.... look up the offending computer and time and lay some heat on that jerk for screwing around with company assets.

good luck.

There are two simple answers.
1) Delete the stupid file, you don't need it.
2) Move the file to a prvate folder, give yourself full rights to the folder and remove ALL rights from EVERYONE else.

Ralph