General discussion


Shutdown policy problem.

By bart777 ·
We are experiencing some strange problems with our domain policies. Our XP users were unable to shutdown their machines locally. It would let them log out and then they could hit shutdown after CTRL-ALT-DEL.

We attempted to add the Domain account for these users to the local administrator account of the XP desktops but they still cannot shut the machine down.

We put in a policy that allowed them to shut down the machines from the domain level. (User right's and assignments-Shut down the system) The problem now is that they can shut down our Citrix servers as well.

The Shutdown the machine remotely policy is VERY restrictive. There are only 5 users that this policy applies to.

How can I give these users the ability to shutdown thier desktops without letting them shutdown my servers?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by phil.hall In reply to Shutdown policy problem.

Since they already have the right to shut their own workstations down (which is what you want) the only problem is that you don't want them to have that same right on the servers (naturally).

Doing so at the domain level may have solved one problem but makes the other possible.

You may need to do something like this: create a new group that has permissions to shut down a system, place the users in that group. Push out that new group at the domain level, but restrict that policy by removing the remote shutdown ability (that is to say, someone would have to be at the server/workstation physically to shut it down.) Since the Citrix users would never be in that position, no problem. The only downside I see is that you (as an administrator) may no longer be able to shut the server down remotely either.

Collapse -

by bart777 In reply to

We are doing something close to this. The strange part is that this works correctly on Win2k workstations but on XP they cannot shutdown.


Collapse -

by bart777 In reply to Shutdown policy problem.

This question was closed by the author

Related Discussions

Related Forums