Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

Re: Remove "Shutdown" command from w2k PCs but enable restart

Subject: Re: Remove "Shutdown" command from w2k PCs but enable restart
Date: Fri, 29 Oct 2004 12:03:28 -0500
While there is another thread about alternative methods of shutting
down, I too had debated whether or not to leave the computers on
overnight in order to perform updates.

I think leaving the computers on 24/7 is a bad idea because it is
similar in a sens of leaving door to your network ajar.

There are still good methods of applying patches or installing managed
programs in timely intervals if you don't do it overnight.
For instance, the Group Policy Intellimirror is super helpful for
installing MSI kind of programs that you want to mandate everyone to
have now or in the future and you require it to run when Group Policies
are applied... for instance SMS 2003 Client.

You can then use SMS 2003 Software Update feature to really build a
robust and flexible patch inventory and deployment schedule.

Slawek
   

"Houpt, Dani" <dhoupt@ICBNY.COM> 10/28/2004 14:48 >>>
We have a Windows 2000 AD environment and want to restrict our PC users

from shutting off their PCs so we can send out OS/AV patches at night. 

We created a GPO to do this but it also blocks them from restarting.  
 
Many times, issues on PCs are resolved even before the users call the 
helpdesk by rebooting, so we don't want to remove that ability from 
them. 
 
Does anyone know a way that we can remove "Shutdown" while still allow

"Restart"?
 
I opened a case with MS about this and the rep said that he didn't 
think that it could be done.
 
Thanks,
-Dani
INDEPENDENCE COMMUNITY BANK CONFIDENTIALITY NOTICE: This message 
(and any attachment) is confidential and 
intended for the sole use of the individual or entity to which it is
addressed. If you are 
not the intended recipient, you must not review, retransmit, convert to
hard-copy, 
copy, use or disseminate this email or any of its attachments. If you
received this email 
in error, please notify the sender immediately and delete it. This
notice is automatically 
appended to all Internet email.


---------------------------------------------------------------------------
---------------------------------------------------------------------------


---------------------------------------------------------------------------
---------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>