That didn't work, I already took away both shutdown rights ( local and remote), and tried my account that still had local admin rights and yep Psshutdown worked, I revoked my local administrative access and sure enough I was stopped cold.
Z Edward E. Ziots CISSP, Network +, Security + Network Engineer Lifespan Organization Email:[email protected] Cell:401-639-3505 From: Kennedy, Jim [mailto:[email protected]] Sent: Friday, November 12, 2010 12:25 PM To: NT System Admin Issues Subject: RE: Remote reboot W2K via remote PSSHUTDOWN Take that right away from the local admin group maybe?...... From: Ziots, Edward [mailto:[email protected]] Sent: Friday, November 12, 2010 12:23 PM To: NT System Admin Issues Subject: RE: Remote reboot W2K via remote PSSHUTDOWN I just answered my own question, the only way to do this is revoke local administrative privileges, to stop the psshutdown command accordingly, denying the shutdown system and remote system shutdown rights will n help accordingly. Z Edward E. Ziots CISSP, Network +, Security + Network Engineer Lifespan Organization Email:[email protected] Cell:401-639-3505 From: Ziots, Edward [mailto:[email protected]] Sent: Friday, November 12, 2010 12:13 PM To: NT System Admin Issues Subject: RE: Remote reboot W2K via remote PSSHUTDOWN I have the very opposite question, if I revoke the rights ( shutdown and Shutdown system allow shutdown from remote systems, via user rights) then how is Psshutdown still working on my Windows 2003 systems. I would like to control access to shutdown the system either local or remotely via the user rights, even if I am a local administrator, so this even possible? Maybe I am missing something here, but I figured by neutering these two user-rights that would effectively cut off folks from shutting down the systems, without authorization. Sincerely, EZ Edward E. Ziots CISSP, Network +, Security + Network Engineer Lifespan Organization Email:[email protected] Cell:401-639-3505 From: David Lum [mailto:[email protected]] Sent: Friday, November 12, 2010 11:42 AM To: NT System Admin Issues Subject: Remote reboot W2K via remote PSSHUTDOWN Is there a way to give someone permissions to reboot a Win2K pro system without them being a local admin? I want them to run a PSSHUTDOWN script remotely but they get access denied unless they're admin. Is there any reg hack I can do hokus pokus with? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
