Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
No restart and Shutdown option at my PC after join my PC to domain.

Answered No restart and Shutdown option at my PC after join my PC to domain.

  • Monday, November 30, 2009 4:00 AM
     
     
    Sign In to Vote
    0

    Dear All,

    No restart and Shutdown option at my PC after join my PC to domain. (I only able to log off my PC)
    To restart or shutdown my PC i have to log oof my PC from domain and the login to my local accout then only i can restart or shutdown my PC.

    Can any one please help me on this....

    waiting for your reply.......

     

All Replies

  • Monday, November 30, 2009 7:50 AM
    Moderator
     
     
    Sign In to Vote
    0
    Hi,

    Thanks for the post.

    This issue will occur if the inappropriate Group Policies are applied on these users.

    Please collect the gpresult log and check if the following policy is set:

    User Configuratuib->Administrative Templates->Start Menu and Taskbar->Remove and prevent access to the Shut Down command. (For Windows Server 2003-based DC)

    User Configuratuib->Administrative Templates->Start Menu and Taskbar->Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands (For Windows Server 2008-based DC)

    If so, please disable it for test.

    Thanks,

    Miles

     
  • Monday, November 30, 2009 9:46 AM
     
     
    Sign In to Vote
    0

    Many thanks for your reply Miles Zhang,

    I'am using windows server 2000. I have disable :Disable and remove the shut down command" but still same no changes still not able to shutdown or restart the PC?

    please help Miles Zhang...


    waiting for you reply

     
  • Tuesday, December 01, 2009 2:11 AM
    Moderator
     
     
    Sign In to Vote
    0

    Hi,

    Thanks for the update.

    Please refresh the GPOs and we need to run gpupdate /force command on the client machines after applying the group policy on the server side.

    If it cannot work, please run the "gpresult /v >c:\gpresult.txt" command on the problematic client. Please send the gpresult.txt file to me. Use Windows Live SkyDrive (http://www.skydrive.live.com/) to upload the file and then give me the download address.

     

     

     
  • Wednesday, December 02, 2009 1:15 AM
     
     
    Sign In to Vote
    0

    Hi,

    Thanks for the update.

    Please refresh the GPOs and we need to run gpupdate /force command on the client machines after applying the group policy on the server side.

    If it cannot work, please run the "gpresult /v >c:\gpresult.txt" command on the problematic client. Please send the gpresult.txt file to me. Use Windows Live SkyDrive (http://www.skydrive.live.com/ ) to upload the file and then give me the download address.

     

     


    Many thanks for your reply Miles Zhang,

    Below link is the result but i don't understand what is the result mean.
    please help me to explain what this result mean and how to solve my problem?
    Sorry for asking this question. I am still in learning stage.

    waiting for your reply.

    http://cid-4050787e4b4d9f9d.skydrive.live.com/self.aspx/.Public/gp^_result.txt
     
  • Wednesday, December 02, 2009 2:15 AM
    Moderator
     
     
    Sign In to Vote
    0
    Hi,

    Thanks for the update.

    After checking the information, I find that it was collected from DC.

    Actually, we need to run the "gpresult /v >c:\gpresult.txt" command on the problematic client machine instead of the server. Please check it.

    Thanks,

    Miles
     
  • Wednesday, December 02, 2009 4:22 AM
     
     
    Sign In to Vote
    0
    Hi Miles,

    why i getting below error message when i login as active directory user on problematic client machine?
    http://img694.imageshack.us/img694/7762/34848853.jpg


    But when i login as local user then i can export the result. That result you can find at below link.
    http://cid-4050787e4b4d9f9d.skydrive.live.com/self.aspx/.Public/gpresult.txt
     
  • Wednesday, December 02, 2009 11:01 AM
     
     
    Sign In to Vote
    0
    Below is the result.
    how to solve my problem?



    Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001

    Created On 12/2/2009 at 3:01:50 AM



    RSOP results for TRUMETERMY\raj on VB1 : Logging Mode
    ------------------------------------------------------

    OS Type:                     Microsoft Windows XP Professional
    OS Configuration:            Member Workstation
    OS Version:                  5.1.2600
    Domain Name:                 TRUMETERMY
    Domain Type:                 Windows 2000
    Site Name:                   Default-First-Site-Name
    Roaming Profile:            
    Local Profile:               C:\Documents and Settings\raj
    Connected over a slow link?: No


    COMPUTER SETTINGS
    ------------------
        CN=VB1,CN=Computers,DC=TRUMETER,DC=MY
        Last time Group Policy was applied: 12/2/2009 at 2:41:11 AM
        Group Policy was applied from:      fal.TRUMETER.MY
        Group Policy slow link threshold:   500 kbps

        Applied Group Policy Objects
        -----------------------------
            Default Domain Controllers Policy

        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            Local Group Policy
                Filtering:  Not Applied (Empty)

        The computer is a part of the following security groups:
        --------------------------------------------------------
            BUILTIN\Administrators
            Everyone
            BUILTIN\Users
            NT AUTHORITY\NETWORK
            NT AUTHORITY\Authenticated Users
            VB1$
            Domain Computers
           
        Resultant Set Of Policies for Computer:
        ----------------------------------------

            Software Installations
            ----------------------
                N/A

            Startup Scripts
            ---------------
                N/A

            Shutdown Scripts
            ----------------
                N/A

            Account Policies
            ----------------
                N/A

            Audit Policy
            ------------
                GPO: Default Domain Controllers Policy
                    Policy:            AuditPolicyChange
                    Computer Setting:  No Auditing

                GPO: Default Domain Controllers Policy
                    Policy:            AuditPrivilegeUse
                    Computer Setting:  No Auditing

                GPO: Default Domain Controllers Policy
                    Policy:            AuditDSAccess
                    Computer Setting:  No Auditing

                GPO: Default Domain Controllers Policy
                    Policy:            AuditAccountLogon
                    Computer Setting:  No Auditing

                GPO: Default Domain Controllers Policy
                    Policy:            AuditObjectAccess
                    Computer Setting:  No Auditing

                GPO: Default Domain Controllers Policy
                    Policy:            AuditLogonEvents
                    Computer Setting:  No Auditing

                GPO: Default Domain Controllers Policy
                    Policy:            AuditProcessTracking
                    Computer Setting:  No Auditing

                GPO: Default Domain Controllers Policy
                    Policy:            AuditSystemEvents
                    Computer Setting:  No Auditing

            User Rights
            -----------
                GPO: Default Domain Controllers Policy
                    Policy:            MachineAccountPrivilege
                    Computer Setting:  Authenticated Users
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            DenyNetworkLogonRight
                    Computer Setting:  N/A

                GPO: Default Domain Controllers Policy
                    Policy:            RestorePrivilege
                    Computer Setting:  *S-1-5-32-549
                                       Backup Operators
                                       Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            TcbPrivilege
                    Computer Setting:  N/A

                GPO: Default Domain Controllers Policy
                    Policy:            SystemProfilePrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            DenyServiceLogonRight
                    Computer Setting:  N/A

                GPO: Default Domain Controllers Policy
                    Policy:            ServiceLogonRight
                    Computer Setting:  N/A

                GPO: Default Domain Controllers Policy
                    Policy:            UndockPrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            CreatePermanentPrivilege
                    Computer Setting:  N/A

                GPO: Default Domain Controllers Policy
                    Policy:            AuditPrivilege
                    Computer Setting:  N/A

                GPO: Default Domain Controllers Policy
                    Policy:            TakeOwnershipPrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            CreatePagefilePrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            EnableDelegationPrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            DebugPrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            SystemTimePrivilege
                    Computer Setting:  *S-1-5-32-549
                                       Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            DenyBatchLogonRight
                    Computer Setting:  N/A

                GPO: Default Domain Controllers Policy
                    Policy:            BackupPrivilege
                    Computer Setting:  *S-1-5-32-549
                                       Backup Operators
                                       Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            CreateTokenPrivilege
                    Computer Setting:  N/A

                GPO: Default Domain Controllers Policy
                    Policy:            ChangeNotifyPrivilege
                    Computer Setting:  Authenticated Users
                                       Administrators
                                       Everyone
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            SyncAgentPrivilege
                    Computer Setting:  N/A

                GPO: Default Domain Controllers Policy
                    Policy:            ProfileSingleProcessPrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            LoadDriverPrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            InteractiveLogonRight
                    Computer Setting:  *S-1-5-32-548
                                       Administrators
                                       Authenticated Users
                                       Backup Operators
                                       *S-1-5-32-550
                                       *S-1-5-32-549
                                       TRUMETERMY\IUSR_FAL
                                       TsInternetUser
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            RemoteShutdownPrivilege
                    Computer Setting:  *S-1-5-32-549
                                       Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            IncreaseBasePriorityPrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            NetworkLogonRight
                    Computer Setting:  TRUMETERMY\IWAM_FAL
                                       Authenticated Users
                                       Administrators
                                       Everyone
                                       TRUMETERMY\IUSR_FAL
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            LockMemoryPrivilege
                    Computer Setting:  N/A

                GPO: Default Domain Controllers Policy
                    Policy:            ShutdownPrivilege
                    Computer Setting:  *S-1-5-32-550
                                       *S-1-5-32-549
                                       *S-1-5-32-548
                                       Backup Operators
                                       Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            SecurityPrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            AssignPrimaryTokenPrivilege
                    Computer Setting:  N/A

                GPO: Default Domain Controllers Policy
                    Policy:            SystemEnvironmentPrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            IncreaseQuotaPrivilege
                    Computer Setting:  Administrators
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            BatchLogonRight
                    Computer Setting:  TRUMETERMY\IWAM_FAL
                                       TRUMETERMY\IUSR_FAL
                                      
                GPO: Default Domain Controllers Policy
                    Policy:            DenyInteractiveLogonRight
                    Computer Setting:  N/A

            Security Options
            ----------------
                N/A

            Event Log Settings
            ------------------
                N/A

            Restricted Groups
            -----------------
                N/A

            System Services
            ---------------
                N/A

            Registry Settings
            -----------------
                N/A

            File System Settings
            --------------------
                N/A

            Public Key Policies
            -------------------
                N/A

            Administrative Templates
            ------------------------
                N/A


    USER SETTINGS
    --------------
        CN=Thamaraj a/l Maharajah,OU=IT,OU=Staff,DC=TRUMETER,DC=MY
        Last time Group Policy was applied: 12/2/2009 at 3:01:18 AM
        Group Policy was applied from:      fal.TRUMETER.MY
        Group Policy slow link threshold:   500 kbps

        Applied Group Policy Objects
        -----------------------------
            Default Domain Controllers Policy

        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            ss
                Filtering:  Not Applied (Empty)

            Local Group Policy
                Filtering:  Not Applied (Empty)

        The user is a part of the following security groups:
        ----------------------------------------------------
            Domain Users
            Everyone
            BUILTIN\Users
            NT AUTHORITY\INTERACTIVE
            NT AUTHORITY\Authenticated Users
            LOCAL
            TM IT
            TM HR
           
        Resultant Set Of Policies for User:
        ------------------------------------

            Software Installations
            ----------------------
                N/A

            Public Key Policies
            -------------------
                N/A

            Administrative Templates
            ------------------------
                GPO: Default Domain Controllers Policy
                    Setting: Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
                    State:   disabled

            Folder Redirection
            ------------------
                N/A

            Internet Explorer Browser User Interface
            ----------------------------------------
                N/A

            Internet Explorer Connection
            ----------------------------
                N/A

            Internet Explorer URLs
            ----------------------
                N/A

            Internet Explorer Security
            --------------------------
                N/A

            Internet Explorer Programs
            --------------------------
                N/A
     



     
  • Thursday, December 03, 2009 5:05 AM
    Moderator
     
     Answered
    Sign In to Vote
    0

    Hi,

    Thanks for the information,

    As is shown below, the inappropriate policy is applied on the client machine.

            Administrative Templates
            ------------------------
                GPO: Default Domain Controllers Policy
                    Setting: Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
                    State:   disabled

    Please navigate to HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer and check if there is Registry Value:"NoClose":

    =========================================================
    Policy:Disable and remove the Turn Off Computer button
    Description:Removes the "Turn Off Computer" button from the Start Menu and
    prevents shutting down Windows using the standard shutdown user interface.
    Registry Value:"NoClose"

    If so, please delete it for check.

    For more information, please refer to the following article:

    Policy settings for the Start menu in Windows XP
    http://support.microsoft.com/kb/292504

    Thanks,

    Miles

     
  • Wednesday, February 15, 2012 11:16 PM
     
     
    Sign In to Vote
    0
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon 4) Set the value of PowerDownAfterShutdown to 1