Have you checked for other Group Policies that might be applied? Don't forget that policies are applied in the order LDSOU
Local Security Policy Site GPOs Domain GPOs Organizational Unit (OU) GPOs. The policy that is applied last wins in any conflict. You can use the GPRESULT.EXE tool to determine which Group Policies are being applied. In addition you might want to look for any system policies that may be being applied. There is a system policy setting known as "Remove Shut Down command from Start menu", which sets the following registry key. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Value Name: NoClose If this is set to 1 then the Shutdown command is removed from the start menu. Tony ---------- Original Message ---------------------------------- From: "Jochen Andries" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Thu, 4 Jul 2002 14:48:44 +0200 Damn, It's mentioned : "not configured". SO I guess that if it isn't configured, you'll have the choice of shutting down or logging off. SH*T BTW : It's the first time I installed a DC and AD. So I'm already happy that everything else works. Just about the policies... I tried to change the logo in Internet Explorer to the company-logo... I've set it up the the Default Group Policy (it was the ONLY thing I changed in the policy). And the logo isn't coming to the clients. No big deal, but the shutdown-issue is ! BTW 2 : Thank you for helping me and stop e-fighting !! :-))) -----Oorspronkelijk bericht----- Van: Tony Murray [mailto:[EMAIL PROTECTED]] Verzonden: donderdag 4 juli 2002 14:43 Aan: [EMAIL PROTECTED] Onderwerp: RE: [ActiveDir] Group Policies are killing me (infact, the users are) Yes, by default you would expect it to be "Not Configured", i.e. the Shutdown options are enabled. ---------- Original Message ---------------------------------- From: "Darren Sykes" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Thu, 4 Jul 2002 13:38:11 +0100 Still ignoring me - good plan it seems! Sounds about right, though using the standard machine template and AD policies, that should be enabled anyway, shouldn't it? Darren -----Original Message----- From: Tony Murray [mailto:[EMAIL PROTECTED]] Sent: 04 July 2002 13:33 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policies are killing me (infact, the users are) Darren, I'm still ignoring you from last time. ;-) Actually, I think the KB article is misleading. If you read the whole article, you will see that it refers to two different policy settings: one in the Computer configuration and another in the User configuration. These are two completely separate settings. The first one (Computer configuration) refers to, "Allow system to be shut down without having to log on". The second one (User configuration) refers to, "Disable and remove the Shut Down command". I suspect that the problem Jochen is having relates to the second policy setting, the explanation for which is shown below: "Prevents users from shutting down or restarting Windows. This policy removes the Shut Down option from the Start menu and disables the Shut Down button on the Windows Security dialog box, which appears when you press CTRL+ALT+DEL. This policy prevents users from using the Windows user interface to shut down the system, although it does not prevent them from running programs that shut down Windows. If you disable this policy or do not configure it, the Shut Down menu option appears, and the Shut Down button is enabled." Hope this clears things up a bit. Tony ---------- Original Message ---------------------------------- From: "Darren Sykes" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Thu, 4 Jul 2002 13:08:04 +0100 Tony, Maybe I read that wrong, but I thought the problem was that the users could shut their machines (i.e workstations) down, but they have to logout first then use the shutdown button which the technet article you describe enables. The problem would therefore be the inablility to choose shutdown from the start menu. Or maybe it's just me misinterpretting things again! Darren -----Original Message----- From: Tony Murray [mailto:[EMAIL PROTECTED]] Sent: Thu 04/07/2002 12:42 To: [EMAIL PROTECTED] Cc: Subject: Re: [ActiveDir] Group Policies are killing me (infact, the users are) Is this any good to you? http://support.microsoft.com/default.aspx?scid=kb;en-us;Q313924 Tony ---------- Original Message ---------------------------------- From: "Jochen Andries" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Thu, 4 Jul 2002 07:39:44 +0200 Hello, I just configured my DC and AD. But now, when people want to log out of = the network, they first have to log off, then push Ctrl-Alt-Del, then = choose shutdown and then shutdown the system. I didn't configured any Group Policy :-(( Any Idea ????? Greetings, Jochen Andries ICT-Manager Jabbeke -- Belgium List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ .+-.+-.+- List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
