Your probably going to see them just use the power button if you did
that anyways. And if they were missing a shutdown button, the mentality
of an end user, would probably be to call you or the helpdesk trying to
report a virus or at least wondering where it went. Why don't you push
the updates out when they login in the morning. That's when most of the
places I have seen do updates, asset management, etc... The user logs
on and goes for their morning coffee. Or you could just send a memo
saying to leave their PC's on when they go home at night. ;)
Craig Lett
Security Administrator
IT Security Services
USF Technology Services
630 Kenmoor Ave SE, Suite 200
Grand Rapids, MI 49546
craig.lett@usfc.com
-----Original Message-----
From: Houpt, Dani [mailto:dhoupt@ICBNY.COM]
Sent: Thursday, October 28, 2004 3:49 PM
To: focus-ms@securityfocus.com
Subject: Remove "Shutdown" command from w2k PCs but enable restart
We have a Windows 2000 AD environment and want to restrict our PC users
from shutting off their PCs so we can send out OS/AV patches at night.
We created a GPO to do this but it also blocks them from restarting.
Many times, issues on PCs are resolved even before the users call the
helpdesk by rebooting, so we don't want to remove that ability from
them.
Does anyone know a way that we can remove "Shutdown" while still allow
"Restart"?
I opened a case with MS about this and the rep said that he didn't
think that it could be done.
Thanks,
-Dani
INDEPENDENCE COMMUNITY BANK CONFIDENTIALITY NOTICE: This message
(and any attachment) is confidential and
intended for the sole use of the individual or entity to which it is
addressed. If you are
not the intended recipient, you must not review, retransmit, convert to
hard-copy,
copy, use or disseminate this email or any of its attachments. If you
received this email
in error, please notify the sender immediately and delete it. This
notice is automatically
appended to all Internet email.
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
-------------------------------------------------------------------------------------
This e-mail is the exclusive, private and confidential property of the sender.
The
information contained in it is intended solely for the use of the sender and the
intended recipient. If you are not the intended recipient you are hereby
advised that
any unauthorized disclosure, copying, distribution or the taking of any action
in
reliance on the contents of this message is strictly prohibited. If you have
received
this e-mail in error, please notify us immediately by telephone (call the USF
Corporation Technical Support Center at 1-800-753-4563) and then destroy this
document and any copies in any form immediately. Finally, the recipient should
check this email and any attachments for the presence of viruses. USF
Corporation
accepts no liability for any damage caused by any virus transmitted by this
email.
-------------------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
