Remove Shut Down Removal from Laptop... TServer ONLY!

Hello all,

I have over the last two days been working to 'lock down' our new TServer
using GroupPolicy. This is uncharted water for me and I could use some help.
I disabled the shut down command and it is gone everywhere including on my
laptop! I guess I need to somehow have this only apply to users that are NOT
administrators and I am not sure how to do this. Also I suspect that I have
mad either change to the default policy rather than creating a new one. I
could use real simple directions on how to either make the default NOT apply
to administrators OR how to set up a new policy and apply it appropriately.

Thanks in advance for your help
M

P.S. Happy Thanksgiving to all of you that are U.S. based!

Moishe
Thu Nov 27 13:55:26 CST 2003

On the security tab, apply group policy deny Administrators, don't mess or
deny the default policy, click new to create a new one.
"Maureen" <nosend2me@hotmail.com> wrote in message
news:OW%23CwnRtDHA.2380@TK2MSFTNGP09.phx.gbl...
> Hello all,
>
> I have over the last two days been working to 'lock down' our new TServer
> using GroupPolicy. This is uncharted water for me and I could use some
help.
> I disabled the shut down command and it is gone everywhere including on my
> laptop! I guess I need to somehow have this only apply to users that are
NOT
> administrators and I am not sure how to do this. Also I suspect that I
have
> mad either change to the default policy rather than creating a new one. I
> could use real simple directions on how to either make the default NOT
apply
> to administrators OR how to set up a new policy and apply it
appropriately.
>
> Thanks in advance for your help
> M
>
> P.S. Happy Thanksgiving to all of you that are U.S. based!
>
>

Mark
Thu Nov 27 18:08:48 CST 2003

you need to use loopback GPOs and if you really want to lock it down, look
at AppLauncher....makes it much easier.

--
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com



"Maureen" <nosend2me@hotmail.com> wrote in message
news:OW%23CwnRtDHA.2380@TK2MSFTNGP09.phx.gbl...
> Hello all,
>
> I have over the last two days been working to 'lock down' our new TServer
> using GroupPolicy. This is uncharted water for me and I could use some
help.
> I disabled the shut down command and it is gone everywhere including on my
> laptop! I guess I need to somehow have this only apply to users that are
NOT
> administrators and I am not sure how to do this. Also I suspect that I
have
> mad either change to the default policy rather than creating a new one. I
> could use real simple directions on how to either make the default NOT
apply
> to administrators OR how to set up a new policy and apply it
appropriately.
>
> Thanks in advance for your help
> M
>
> P.S. Happy Thanksgiving to all of you that are U.S. based!
>
>

Maureen
Thu Nov 27 18:58:48 CST 2003

Mark, I beleive that it is possible to do what I want with without spending
@250. Sometimes being harder and learning can pay off. ~Maureen
P.S. Is this a product that YOU sell?

"Mark Mancini" <info@NOSPAMmcse2000.com> wrote in message
news:uiV1IPUtDHA.2224@TK2MSFTNGP09.phx.gbl...
> you need to use loopback GPOs and if you really want to lock it down, look
> at AppLauncher....makes it much easier.
>
> --
> Sincerely,
> Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
> www.MCSE2000.com
> www.AppLauncher.com
>
>
>
> "Maureen" <nosend2me@hotmail.com> wrote in message
> news:OW%23CwnRtDHA.2380@TK2MSFTNGP09.phx.gbl...
> > Hello all,
> >
> > I have over the last two days been working to 'lock down' our new
TServer
> > using GroupPolicy. This is uncharted water for me and I could use some
> help.
> > I disabled the shut down command and it is gone everywhere including on
my
> > laptop! I guess I need to somehow have this only apply to users that are
> NOT
> > administrators and I am not sure how to do this. Also I suspect that I
> have
> > mad either change to the default policy rather than creating a new one.
I
> > could use real simple directions on how to either make the default NOT
> apply
> > to administrators OR how to set up a new policy and apply it
> appropriately.
> >
> > Thanks in advance for your help
> > M
> >
> > P.S. Happy Thanksgiving to all of you that are U.S. based!
> >
> >
>
>

Moishe
Thu Nov 27 19:26:55 CST 2003

You can set loopbackmode in the policy. I think its under computer policy,
group policy.
"Maureen" <nosend2me@hotmail.com> wrote in message
news:%23g6XYpUtDHA.980@TK2MSFTNGP10.phx.gbl...
> Mark, I beleive that it is possible to do what I want with without
spending
> @250. Sometimes being harder and learning can pay off. ~Maureen
> P.S. Is this a product that YOU sell?
>
> "Mark Mancini" <info@NOSPAMmcse2000.com> wrote in message
> news:uiV1IPUtDHA.2224@TK2MSFTNGP09.phx.gbl...
> > you need to use loopback GPOs and if you really want to lock it down,
look
> > at AppLauncher....makes it much easier.
> >
> > --
> > Sincerely,
> > Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
> > www.MCSE2000.com
> > www.AppLauncher.com
> >
> >
> >
> > "Maureen" <nosend2me@hotmail.com> wrote in message
> > news:OW%23CwnRtDHA.2380@TK2MSFTNGP09.phx.gbl...
> > > Hello all,
> > >
> > > I have over the last two days been working to 'lock down' our new
> TServer
> > > using GroupPolicy. This is uncharted water for me and I could use some
> > help.
> > > I disabled the shut down command and it is gone everywhere including
on
> my
> > > laptop! I guess I need to somehow have this only apply to users that
are
> > NOT
> > > administrators and I am not sure how to do this. Also I suspect that I
> > have
> > > mad either change to the default policy rather than creating a new
one.
> I
> > > could use real simple directions on how to either make the default NOT
> > apply
> > > to administrators OR how to set up a new policy and apply it
> > appropriately.
> > >
> > > Thanks in advance for your help
> > > M
> > >
> > > P.S. Happy Thanksgiving to all of you that are U.S. based!
> > >
> > >
> >
> >
>
>

Mark
Sat Nov 29 11:06:20 CST 2003

Yes, this is a product I sell b/c time is money. You may not want to spend
$250....but to many that is 2 hours of time. Considering the time it takes
to lock down a machine and all the things you miss leaving an opening you
will end up putting several hours into it. Now, if a day of your time is
not worth $250 then by all means learn loopback GPOs. Learning on a
production box is not good practice!

--
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com



"Maureen" <nosend2me@hotmail.com> wrote in message
news:%23g6XYpUtDHA.980@TK2MSFTNGP10.phx.gbl...
> Mark, I beleive that it is possible to do what I want with without
spending
> @250. Sometimes being harder and learning can pay off. ~Maureen
> P.S. Is this a product that YOU sell?
>
> "Mark Mancini" <info@NOSPAMmcse2000.com> wrote in message
> news:uiV1IPUtDHA.2224@TK2MSFTNGP09.phx.gbl...
> > you need to use loopback GPOs and if you really want to lock it down,
look
> > at AppLauncher....makes it much easier.
> >
> > --
> > Sincerely,
> > Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
> > www.MCSE2000.com
> > www.AppLauncher.com
> >
> >
> >
> > "Maureen" <nosend2me@hotmail.com> wrote in message
> > news:OW%23CwnRtDHA.2380@TK2MSFTNGP09.phx.gbl...
> > > Hello all,
> > >
> > > I have over the last two days been working to 'lock down' our new
> TServer
> > > using GroupPolicy. This is uncharted water for me and I could use some
> > help.
> > > I disabled the shut down command and it is gone everywhere including
on
> my
> > > laptop! I guess I need to somehow have this only apply to users that
are
> > NOT
> > > administrators and I am not sure how to do this. Also I suspect that I
> > have
> > > mad either change to the default policy rather than creating a new
one.
> I
> > > could use real simple directions on how to either make the default NOT
> > apply
> > > to administrators OR how to set up a new policy and apply it
> > appropriately.
> > >
> > > Thanks in advance for your help
> > > M
> > >
> > > P.S. Happy Thanksgiving to all of you that are U.S. based!
> > >
> > >
> >
> >
>
>

mal
Mon Dec 01 09:39:40 CST 2003

Try this

Go to settings->control panel->administrative tools->local security
policy.

then under local policies->user right assignments, look for 'shutdown
the system' option. uncheck the "User" and "Power users" boxes
leaving "Administrators" only.

Mal


On Thu, 27 Nov 2003 14:08:23 -0500, "Maureen" <nosend2me@hotmail.com>
wrote:

>Hello all,
>
>I have over the last two days been working to 'lock down' our new TServer
>using GroupPolicy. This is uncharted water for me and I could use some help.
>I disabled the shut down command and it is gone everywhere including on my
>laptop! I guess I need to somehow have this only apply to users that are NOT
>administrators and I am not sure how to do this. Also I suspect that I have
>mad either change to the default policy rather than creating a new one. I
>could use real simple directions on how to either make the default NOT apply
>to administrators OR how to set up a new policy and apply it appropriately.
>
>Thanks in advance for your help
>M
>
>P.S. Happy Thanksgiving to all of you that are U.S. based!
>

Mark
Mon Dec 01 21:05:19 CST 2003

in an ideal world.....but many apps REQUIRE local admin rights to run!!!!
AGAIN, AppLauncher SOLVES this issue. a MAJORITY of my client's apps fall
into this category.....so this will still not solve the problem in most
cases...I've been doing TS for several years dude!!!

--
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com



<mal@nospam.com> wrote in message
news:rsnmsvcauq3u68qj3fbbdkrmnlqq73js0i@4ax.com...
> Try this
>
> Go to settings->control panel->administrative tools->local security
> policy.
>
> then under local policies->user right assignments, look for 'shutdown
> the system' option. uncheck the "User" and "Power users" boxes
> leaving "Administrators" only.
>
> Mal
>
>
> On Thu, 27 Nov 2003 14:08:23 -0500, "Maureen" <nosend2me@hotmail.com>
> wrote:
>
> >Hello all,
> >
> >I have over the last two days been working to 'lock down' our new TServer
> >using GroupPolicy. This is uncharted water for me and I could use some
help.
> >I disabled the shut down command and it is gone everywhere including on
my
> >laptop! I guess I need to somehow have this only apply to users that are
NOT
> >administrators and I am not sure how to do this. Also I suspect that I
have
> >mad either change to the default policy rather than creating a new one. I
> >could use real simple directions on how to either make the default NOT
apply
> >to administrators OR how to set up a new policy and apply it
appropriately.
> >
> >Thanks in advance for your help
> >M
> >
> >P.S. Happy Thanksgiving to all of you that are U.S. based!
> >
>