RE: [ActiveDir] Preventing local admin from rebooting servers

[Ulf B. Simon-Weidner]

If you want somehow prevent admins from rebooting the system remove them from the local security setting which enables them to shutdown the system.   Note: the other group joe mentioned is created so you can controll who’s able to shutdown the system (such as domain admins) Note 2: the admins would be able to grant themselves the right again   Ulf   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rocky Habeeb Sent: Monday, November 28, 2005 11:01 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Preventing local admin from rebooting servers   Dear joe,   Did you really mean "and remove admins" or did you mean to say "and remove TheNewlyCreatedGroup"?  If the former, could you please explain?   Thanks. RH ____________________________     -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of joe Sent: Monday, November 28, 2005 4:05 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Preventing local admin from rebooting servers You can't guarantee to stop them but you can slow them down by creating a new group and adding it to the shutdown computer right and remove admins.   I did this at a company that had previously given out admin to everyone who had any app on a server in the datacenter. The servers were rebooting all of the time and no one had a clue what was going on. After that one small change, 95% of the reboots stopped and most of the folks had no clue why they all of a sudden lost that ability.     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Santos, Pavel Sent: Monday, November 28, 2005 11:59 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Preventing local admin from rebooting servers Hello list,   Is there a way to prevent members of the local admin group on a server from rebooting the servers?  We are trying to prevent some developers that need admin rights from rebooting the servers.    Thanks in advance,   Pavel ------------------------------- -- Even though this E-Mail has been scanned and found clean of -- known viruses, OPM can not guarantee this message is virus free. ------------------------------- -- This message was automatically generated. -------------------------------oo