Some update changed XP where a non-admin user only has a log off option when selecting the shutdown option through the start button. CTL-ALT-DEL Shutdown also only allows logoff. The Shutdown.exe application does not execute for non-admin users. We have tried the local group Backup Operator and Users, which are reported having shutdown privileges. Only the Backup Operator works. The inherent problem with this is the non-admin user now has privileges to backup and restore anywhere on the domain.
In light of several compromises in local government which resulted in the theft of large sums of money as well as employee bank data, our goal is to remove admin rights from as many local users as possible. But removing the ability to easily shutdown the computer is a major show stopper.
Has anyone encountered this scenario and found a solution.
