Microsoft KB Archive/200863

= SBS Allows Unauthorized Shutdown from Logon Prompt =

Article ID: 200863

Article Last Modified on 10/3/2003

-

APPLIES TO


 * Microsoft BackOffice Small Business Server 4.0
 * Microsoft BackOffice Small Business Server 4.0a

-



This article was previously published under Q200863



IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SYMPTOMS
The Shut Down button on the intial logon prompt is disabled by default on retail Windows NT Server installations. This is to provide additional security by forcing an authorized user to log on locally to the server to be able to perform a shutdown.

In BackOffice Small Business Server (SBS), the Shut Down button is enabled by default, which allows anyone to perform a soft shut down of the server without being validated by the server.



RESOLUTION
To work around this problem, use either of the following methods:  Method 1

Modify the funtionality through a registry setting.

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

 Run Registry Editor (Regedt32.exe). From the HKEY_LOCAL_MACHINE subtree, go to the following key: 

\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon

 Delete the ShutdownWithoutLogon value.

NOTE: It is incorrectly listed with a value type of REG_DWORD and should be REG_SZ. Select the \Winlogon key. Add the following value to the key:

Value Name: ShutDownWithoutLogon

Data Type: REG_SZ

String: 0=Disabled; 1=Enabled

</li> Close the registry.</li> Log off for changes to take place.

</li></ol> </li> Method 2

<ol> Log on locally to the SBS server with a valid account.</li> Press CTRL+ALT+DEL to bring up the Windows NT Security dialog box</li> Select Lock Workstation.</li></ol>

This locks the server so that only the logged on individual or an Administrator can unlock it. There is no option to Shut Down the server from this logon prompt.</li></ul>

<div class="moreinformation_section">

MORE INFORMATION
For additional information, see the following article or articles in the Microsoft Knowledge Base:

114817 No Shutdown Button in Windows NT Server Welcome Screen

Additional query words: smallbiz

Keywords: kbprb KB200863

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.