Microsoft KB Archive/313924

Knowledge Base

How To Make the Shutdown Button Unavailable in the Logon Dialog Box in Windows 2000

Article ID: 313924

Article Last Modified on 11/1/2006

---

APPLIES TO

• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Advanced Server
• Microsoft Small Business Server 2000 Standard Edition

---

This article was previously published under Q313924

IN THIS TASK

SUMMARY How to Make the Shutdown Button Unavailable by Using Group Policy

• To Edit the Local Policy on a Windows 2000-Based Computer
• To Edit the Group Policy in a Domain

Troubleshooting REFERENCES

SUMMARY

This article describes how to prevent users from shutting down the computer from the Log On to Windows dialog box. This prevents unauthenticated users from shutting down Windows.

back to the top

How to Make the Shutdown Button Unavailable by Using Group Policy

You can use Group Policy Editor to make the Shutdown button unavailable in the Log On to Windows dialog box that appears when you press CTRL+ALT+DELETE on the Welcome to Windows screen.

back to the top

To Edit the Local Policy on a Windows 2000-Based Computer

To make the Shutdown button unavailable on a standalone Windows 2000-based computer:

1. Click Start, and then click Run.
2. In the Open box, type gpedit.msc, and then click OK.
3. Expand Computer Configuration, expand Windows Settings, expand Security Settings, expand Local Policies, and then click Security Options.
4. In the right pane, double-click Allow system to be shut down without having to log on.
5. Click Disabled, and then click OK.
   

NOTE: If domain-level policy settings are defined, they may override this local policy setting.

1. Quit Group Policy Editor.
2. Restart the computer.

back to the top

To Edit the Group Policy in a Domain

To edit a domain-wide policy to make the Shutdown button unavailable::

1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In the console, right-click your domain, and then click Properties.
3. Click the Group Policy tab.
4. In the Group Policy Object Links box, click the group policy for which you want to apply this setting. For example, click Default Domain Policy.
5. Click Edit.
6. Expand User Configuration, expand Administrative Templates, and then click Start Menu & Taskbar.
7. In the right pane, double-click Disable and remove the Shut Down command.
8. Click Enabled, and then click OK.
9. Quit the Group Policy editor, and then click OK.

back to the top

Troubleshooting

Group Policy changes are not immediately enforced. Group Policy background processing can take up to 5 minutes to be refreshed on domain controllers, and up to 120 minutes to be refreshed on client computers. To force background processing of Group Policy settings, use the Secedit.exe tool. To do this:

1. Click Start, and then click Run.
2. In the Open box, type cmd, and then click OK.
3. Type secedit /refreshpolicy user_policy, and then press ENTER.
4. Type secedit /refreshpolicy machine_policy, and then press ENTER.
5. Type exit, and then press ENTER to quit the command prompt.

back to the top

REFERENCES

For additional information about using Secedit, click the article number below to view the article in the Microsoft Knowledge Base:

227302 Using Secedit to Force a Group Policy Refresh Immediately

For additional information about Group Policy, visit the following Microsoft Web site:

http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/seconfig.mspx

back to the top

Keywords: kbhowto kbhowtomaster KB313924

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.