How can I restrict regular users from shutting down their workstation?

[darthpenguin]

Hi All,

I work in a domain environment administering a large number of workstations running Windows 7 enterprise. I want to restrict regular users from shutting down their PCs so that I can perform remote administrative tasks without walking out on the floor and ensuring all 300 + machines are actually turned on. I do not have rights to the domain controller so I cannot assign by group policy. I can use psexec or ntrights to remove shutdown options from explorer but users can still initiate the shutdown command via cmd and pressing the power button on the tower still invokes a shutdown. Note: I am not talking about a cold shutdown i.e holding the power button (I can't actually do anything about that). So is there a way (perhaps in the registry) to disable the shutdown command for all users except the local administrator? I'll need to do this to over 300 PCs so if it can be done via script of command line that would be best.

Thanks,

 

[Googan]

Hi you can lock cmd from within the registry not sure how at this second in time because not at my computer but i believe it is some where under user configuration and the administrative templates. Also about the power button this can be changed under the power setting in control pannel.

Hope this helps. I will try to reply in greater detail later when i get home.

Thanks Tom

 

[darthpenguin]

Thanks for the quick reply.

I don't want to lock cmd because the users execute batch files I have written. I just want to revoke access to the shutdown command only. I know I can change setting for the power button in control panel but I have 300+ computers to do this to. I don't want to go to each one at a time. Is there a registry tweak I can invoke with psexec or something? I want to automate this. Also if I change power settings in the control panel how can I force those settings onto all users and how can I prevent users from changing the power settings?