It's established at the local machine and is still cached as the option that is enforced.
Look to local machine policy and see what the effective setting is. I guarantee this is not the default. It's been changed and is now been pushed down to the local machine settings. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 "Any sufficiently advanced technology is indistinguishable from magic." --- Arthur C. Clarke > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of > Jochen Andries > Sent: Saturday, July 06, 2002 3:14 AM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Group Policies are killing me > (infact, the users are) > > > D*mn, > > Now I deleted all Policies (on the site, OU, etc...) and > still The only option I get when I want to shutdown is : Log Off. > > Our PC's want to work to much I guess :-)))) > > -----Oorspronkelijk bericht----- > Van: David N. Precht [mailto:[EMAIL PROTECTED]] > Verzonden: vrijdag 5 juli 2002 7:54 > Aan: [EMAIL PROTECTED] > Onderwerp: RE: [ActiveDir] Group Policies are killing me > (infact, the users are) > > > Sorry to hear that. > > Happy 4th, althought late.... > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Tony Murray > Sent: Thursday, July 04, 2002 17:00 > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Group Policies are killing me > (infact, the users are) > > > Hey Rick, Darren and I are still talking.....but the wedding > may be off. > :-) > > Happy 4th July to all the USA subscribers out there. > > Tony > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Rick Kingslan > Sent: Thursday, July 04, 2002 8:04 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Group Policies are killing me > (infact, the users are) > > > Tony, Darren - > > Yes, in fact that is the default behavior (i.e. the Shutdown > selection is available, the button is available via > CTL-ALT-DEL in a session, and it is NOT available on the > CTL-ALT-DEL logon screen). > > I can attest to this specifically and in practice - how do > you prevent aproximately 20,000 teleservices reps from doing > things you don't want them to do? You use profiles and heavy > duty GPO. And, yes, making the various Logoff buttons > disappear is pretty easy. > > This policy and statement: > "Prevents users from shutting down or restarting Windows. > > This policy removes the Shut Down option from the Start menu > and disables the Shut Down button on the Windows Security > dialog box, which appears when you press CTRL+ALT+DEL. > > I suspect, as what has been mentioned, that the policy to > disable the Logoff button has set. By default, as I > mentioned, it's Not Configured, which means that it will flow > down from the Local Machine, where it is enabled via the OS. > Remember, GPO is active - it requires an action to change the > OS or default behaviors. If something is set as 'Not > Configured' all the way from Local Machine to Site to Domain > to OU to OU, etc., then the setting that is at the base OS is > what will still be applied. > > Hope this helps.... > > Oh, Darren and Tony - do you two need, perhaps, some > disinterested 3rd party to mitigate this little issue and get > you two talking again? ;-) > > Rick Kingslan - Microsoft MVP [Windows NT/2000] > Microsoft Certified Trainer > MCSA, MCSE+I - Windows NT / 2000 > > "Any sufficiently advanced technology > is indistinguishable from magic." > --- Arthur C. Clarke > > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]] On Behalf Of Tony Murray > > Sent: Thursday, July 04, 2002 7:43 AM > > To: [EMAIL PROTECTED] > > Subject: RE: [ActiveDir] Group Policies are killing me > > (infact, the users are) > > > > > > Yes, by default you would expect it to be "Not Configured", > i.e. the > > Shutdown options are enabled. > > > > ---------- Original Message ---------------------------------- > > From: "Darren Sykes" <[EMAIL PROTECTED]> > > Reply-To: [EMAIL PROTECTED] > > Date: Thu, 4 Jul 2002 13:38:11 +0100 > > > > Still ignoring me - good plan it seems! > > Sounds about right, though using the standard machine > template and AD > > policies, that should be enabled anyway, shouldn't it? > > > > Darren > > > > > > -----Original Message----- > > From: Tony Murray [mailto:[EMAIL PROTECTED]] > > Sent: 04 July 2002 13:33 > > To: [EMAIL PROTECTED] > > Subject: RE: [ActiveDir] Group Policies are killing me > > (infact, the users are) > > > > Darren, > > > > I'm still ignoring you from last time. ;-) > > > > Actually, I think the KB article is misleading. If you > read the whole > > article, you will see that it refers to two different > policy settings: > > one in the Computer configuration and another in the User > > configuration. These are two completely separate settings. > > > > The first one (Computer configuration) refers to, "Allow > system to be > > shut down without having to log on". > > > > The second one (User configuration) refers to, "Disable and > remove the > > Shut Down command". > > > > I suspect that the problem Jochen is having relates to the second > > policy setting, the explanation for which is shown below: > > > > "Prevents users from shutting down or restarting Windows. > > > > This policy removes the Shut Down option from the Start menu and > > disables the Shut Down button on the Windows Security dialog box, > > which appears when you press CTRL+ALT+DEL. > > > > This policy prevents users from using the Windows user interface to > > shut down the system, although it does not prevent them > from running > > programs that shut down Windows. > > > > If you disable this policy or do not configure it, the Shut > Down menu > > option appears, and the Shut Down button is enabled." > > > > Hope this clears things up a bit. > > > > Tony > > > > ---------- Original Message ---------------------------------- > > From: "Darren Sykes" <[EMAIL PROTECTED]> > > Reply-To: [EMAIL PROTECTED] > > Date: Thu, 4 Jul 2002 13:08:04 +0100 > > > > Tony, > > > > Maybe I read that wrong, but I thought the problem was that > the users > > could shut their machines (i.e workstations) down, but they have to > > logout first then use the shutdown button which the technet article > > you describe enables. The problem would therefore be the > inablility to > > choose shutdown from the start menu. Or maybe it's just me > > misinterpretting things again! > > > > Darren > > > > -----Original Message----- > > From: Tony Murray [mailto:[EMAIL PROTECTED]] > > Sent: Thu 04/07/2002 12:42 > > To: [EMAIL PROTECTED] > > Cc: > > Subject: Re: [ActiveDir] Group Policies are killing me > (infact, the > > users are) > > > > > > > > Is this any good to you? > > > > http://support.microsoft.com/default.aspx?scid=kb;en-us;Q313924 > > > > Tony > > > > ---------- Original Message ---------------------------------- > > From: "Jochen Andries" <[EMAIL PROTECTED]> > > Reply-To: [EMAIL PROTECTED] > > Date: Thu, 4 Jul 2002 07:39:44 +0200 > > > > Hello, > > > > I just configured my DC and AD. But now, when people > > want to log out of = > > the network, they first have to log off, then push > > Ctrl-Alt-Del, then = > > choose shutdown and then shutdown the system. > > > > I didn't configured any Group Policy :-(( Any Idea ????? > > > > > > Greetings, > > > > Jochen Andries > > ICT-Manager > > Jabbeke -- Belgium > > > > List info : http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > > > > List info : > > http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > > > > > > .+-.+-.+- > > List info : > > http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > > List info : > > http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > > > > List info : > > http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > List info : > http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > List info : > http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > List info : > http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
