D*mn, Now I deleted all Policies (on the site, OU, etc...) and still The only option I get when I want to shutdown is : Log Off.
Our PC's want to work to much I guess :-)))) -----Oorspronkelijk bericht----- Van: David N. Precht [mailto:[EMAIL PROTECTED]] Verzonden: vrijdag 5 juli 2002 7:54 Aan: [EMAIL PROTECTED] Onderwerp: RE: [ActiveDir] Group Policies are killing me (infact, the users are) Sorry to hear that. Happy 4th, althought late.... -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Tony Murray Sent: Thursday, July 04, 2002 17:00 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policies are killing me (infact, the users are) Hey Rick, Darren and I are still talking.....but the wedding may be off. :-) Happy 4th July to all the USA subscribers out there. Tony -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Rick Kingslan Sent: Thursday, July 04, 2002 8:04 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policies are killing me (infact, the users are) Tony, Darren - Yes, in fact that is the default behavior (i.e. the Shutdown selection is available, the button is available via CTL-ALT-DEL in a session, and it is NOT available on the CTL-ALT-DEL logon screen). I can attest to this specifically and in practice - how do you prevent aproximately 20,000 teleservices reps from doing things you don't want them to do? You use profiles and heavy duty GPO. And, yes, making the various Logoff buttons disappear is pretty easy. This policy and statement: "Prevents users from shutting down or restarting Windows. This policy removes the Shut Down option from the Start menu and disables the Shut Down button on the Windows Security dialog box, which appears when you press CTRL+ALT+DEL. I suspect, as what has been mentioned, that the policy to disable the Logoff button has set. By default, as I mentioned, it's Not Configured, which means that it will flow down from the Local Machine, where it is enabled via the OS. Remember, GPO is active - it requires an action to change the OS or default behaviors. If something is set as 'Not Configured' all the way from Local Machine to Site to Domain to OU to OU, etc., then the setting that is at the base OS is what will still be applied. Hope this helps.... Oh, Darren and Tony - do you two need, perhaps, some disinterested 3rd party to mitigate this little issue and get you two talking again? ;-) Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 "Any sufficiently advanced technology is indistinguishable from magic." --- Arthur C. Clarke > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Tony Murray > Sent: Thursday, July 04, 2002 7:43 AM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Group Policies are killing me > (infact, the users are) > > > Yes, by default you would expect it to be "Not Configured", > i.e. the Shutdown options are enabled. > > ---------- Original Message ---------------------------------- > From: "Darren Sykes" <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > Date: Thu, 4 Jul 2002 13:38:11 +0100 > > Still ignoring me - good plan it seems! > Sounds about right, though using the standard machine > template and AD policies, that should be enabled anyway, shouldn't it? > > Darren > > > -----Original Message----- > From: Tony Murray [mailto:[EMAIL PROTECTED]] > Sent: 04 July 2002 13:33 > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Group Policies are killing me > (infact, the users are) > > Darren, > > I'm still ignoring you from last time. ;-) > > Actually, I think the KB article is misleading. If you read > the whole article, you will see that it refers to two > different policy settings: one in the Computer configuration > and another in the User configuration. These are two > completely separate settings. > > The first one (Computer configuration) refers to, "Allow > system to be shut down without having to log on". > > The second one (User configuration) refers to, "Disable and > remove the Shut Down command". > > I suspect that the problem Jochen is having relates to the > second policy setting, the explanation for which is shown below: > > "Prevents users from shutting down or restarting Windows. > > This policy removes the Shut Down option from the Start menu > and disables the Shut Down button on the Windows Security > dialog box, which appears when you press CTRL+ALT+DEL. > > This policy prevents users from using the Windows user > interface to shut down the system, although it does not > prevent them from running programs that shut down Windows. > > If you disable this policy or do not configure it, the Shut > Down menu option appears, and the Shut Down button is enabled." > > Hope this clears things up a bit. > > Tony > > ---------- Original Message ---------------------------------- > From: "Darren Sykes" <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > Date: Thu, 4 Jul 2002 13:08:04 +0100 > > Tony, > > Maybe I read that wrong, but I thought the problem was that > the users could shut their machines (i.e workstations) down, > but they have to logout first then use the shutdown button > which the technet article you describe enables. The problem > would therefore be the inablility to choose shutdown from the > start menu. Or maybe it's just me misinterpretting things again! > > Darren > > -----Original Message----- > From: Tony Murray [mailto:[EMAIL PROTECTED]] > Sent: Thu 04/07/2002 12:42 > To: [EMAIL PROTECTED] > Cc: > Subject: Re: [ActiveDir] Group Policies are killing me > (infact, the users are) > > > > Is this any good to you? > > http://support.microsoft.com/default.aspx?scid=kb;en-us;Q313924 > > Tony > > ---------- Original Message ---------------------------------- > From: "Jochen Andries" <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > Date: Thu, 4 Jul 2002 07:39:44 +0200 > > Hello, > > I just configured my DC and AD. But now, when people > want to log out of = > the network, they first have to log off, then push > Ctrl-Alt-Del, then = > choose shutdown and then shutdown the system. > > I didn't configured any Group Policy :-(( Any Idea ????? > > > Greetings, > > Jochen Andries > ICT-Manager > Jabbeke -- Belgium > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > List info : > http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > > .+-.+-.+- > List info : > http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > List info : > http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > List info : > http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
