Petri.com forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Server Operating Systems > Windows Server 2000 / 2003 / 2003 R2
Petri.com is happy to award RicklesP the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read
Notices

Terminal Server - hide shut down button

Terminal Server - hide shut down button

this thread has 14 replies and has been viewed 37763 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #11  
Old 21st May 2008, 14:46
RobW RobW is offline
Member
Here to help
 
 Join Date: Jul 2006
  6 month star 12 month star
 Location: Ontario, Canada
 Posts: 547
 Reputation: RobW has a spectacular aura aboutRobW has a spectacular aura about (167)
Default Re: Terminal Server - hide shut down button

Quote:
Originally Posted by AndyJG247 View Post
Glad you fixed it.
The question was just to make sure you didn't mean there was an icon actually ON the desktop as such as some utilities can add shutdown/restart etc shortcuts and these woudln't be affected by group policy (well removing them wouldn't)
Ya, poor choice of words in my description
__________________
Network Engineers do IT under the desk
  #12  
Old 21st May 2008, 14:56
Killerbe's Avatar
Killerbe Killerbe is offline
Member
Here to help
 
 Join Date: Aug 2007
  6 month star 12 month star
 Location: Belgium
 Posts: 479
 Reputation: Killerbe will become famous soon enough (88)
Default Re: Terminal Server - hide shut down button

Quote:
Originally Posted by RobW View Post
That was a key in Windows 2000 I was reluctant to add it in Server 2003. My solution was in User Configuration - Administrative Templates - Start Menu and Taskbar

Thanks
It works for 2003 also.
And yes it is available through GPO and local policies.
__________________
[Powershell]
Start-DayDream
Set-Location Malibu Beach
Get-Drink
Lay-Back
Start-Sleep
....
Wake-Up!
Resume-Service
Write-Warning
[/Powershell]

BLOG: Therealshrimp.blogspot.com
  #13  
Old 21st May 2008, 15:00
JDMils JDMils is offline
Member
Someone to look up to
 
 Join Date: Dec 2005
  6 month star 12 month star
 Location: Melbourne, Australia
 Posts: 849
 Reputation: JDMils is on a distinguished road (21)
Default Re: Terminal Server - hide shut down button

For the record, if a standard user has permissions to shutdown the TS server, then you have a rights problem on that server. You may have solved the issue by hiding the button, but they can still issue a Shutdown.exe in a cmd box, which they should not have the ability to do.

Create a new user and make sure the only membership he has is to log onto the TS server. Is the Shutdown command still there for the user? Check the TS server's local group memberships (if available) to make sure users are not in the admins group.

For my peace of mind, I'd like to know what you find.
__________________
|
+-- JDMils
|
+-- System Admin, DotNet programmer & Jack of all trades
|
  #14  
Old 21st May 2008, 15:03
RobW RobW is offline
Member
Here to help
 
 Join Date: Jul 2006
  6 month star 12 month star
 Location: Ontario, Canada
 Posts: 547
 Reputation: RobW has a spectacular aura aboutRobW has a spectacular aura about (167)
Default Re: Terminal Server - hide shut down button

I initially looked at a GPO but that would have removed the shutdown button on all the servers, not something I wished to do.

I found this limitation could be overcome by putting the TS in a different OU but this was starting to become a complicated process for such a minor task - hiding a button.
__________________
Network Engineers do IT under the desk
  #15  
Old 21st May 2008, 15:10
RobW RobW is offline
Member
Here to help
 
 Join Date: Jul 2006
  6 month star 12 month star
 Location: Ontario, Canada
 Posts: 547
 Reputation: RobW has a spectacular aura aboutRobW has a spectacular aura about (167)
Default Re: Terminal Server - hide shut down button

The users created on the Small Business Server domain have no special group created for the terminal server. I have implicitly denied all users the ability to log on to a terminal server in their user profile with the exception of three users.

These three users, the terminal server users, are domain users only and not members of the TS local administrator group.

I am not concerned if the shutdown command is available. I am trying to eliminate a clerical user from accidently shutting down the server when they log out of a TS session.

Thanks

Quote:
Originally Posted by JDMils View Post
For the record, if a standard user has permissions to shutdown the TS server, then you have a rights problem on that server. You may have solved the issue by hiding the button, but they can still issue a Shutdown.exe in a cmd box, which they should not have the ability to do.

Create a new user and make sure the only membership he has is to log onto the TS server. Is the Shutdown command still there for the user? Check the TS server's local group memberships (if available) to make sure users are not in the admins group.

For my peace of mind, I'd like to know what you find.
__________________
Network Engineers do IT under the desk
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
display message for shut down script logu_microsoft General Scripting 5 15th March 2007 21:15
problem has been and will shut down shoraah Windows 2000 Pro, XP Pro 3 21st November 2006 16:27
IE6.0 automatically shut down???? raziengg Windows 2000 Pro, XP Pro 1 25th August 2006 11:36
terminal server - manage user's to work only terminal?! redrabbit Terminal Services 3 15th June 2005 16:07
shut down regedit on school Security yugoking Windows Server 2000 / 2003 / 2003 R2 1 9th January 2004 08:52


All times are GMT +3. The time now is 20:34.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri