RE: [ActiveDir] Preventing local admin from rebooting servers

[joe]

You add the new group to the shutdown the server user right. You remove the admins group from it. Then you add anyone who SHOULD be able to shutdown the server to that new group.   Obviously the *correct* way to fix this is to remove the developers from the admin group, but I expect if you could, you would have done that and wouldn't have posted the question in the first place as it would be a non-issue.     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Sent: Monday, November 28, 2005 5:00 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Preventing local admin from rebooting servers Just a quick question here.  I thought a new group was the way to go here, being given the appropriate rights/permissions.  But why would you give this group the Shutdown computer right when that is the problem in the first place?  The admins would still have the right and so would the new group.  Maybe I'm missing something here.   Regards,     Mike Burns   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Monday, November 28, 2005 3:05 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Preventing local admin from rebooting servers You can't guarantee to stop them but you can slow them down by creating a new group and adding it to the shutdown computer right and remove admins.   I did this at a company that had previously given out admin to everyone who had any app on a server in the datacenter. The servers were rebooting all of the time and no one had a clue what was going on. After that one small change, 95% of the reboots stopped and most of the folks had no clue why they all of a sudden lost that ability.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Santos, Pavel Sent: Monday, November 28, 2005 11:59 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Preventing local admin from rebooting servers Hello list,   Is there a way to prevent members of the local admin group on a server from rebooting the servers?  We are trying to prevent some developers that need admin rights from rebooting the servers.    Thanks in advance,   Pavel ------------------------------- -- Even though this E-Mail has been scanned and found clean of -- known viruses, OPM can not guarantee this message is virus free. ------------------------------- -- This message was automatically generated. -------------------------------oo