Remote shutdown with UAC on?

[mrbobpockett]

Hi there i hope someone can help me with this its been driving me mad and googles taking me round in circles

I need to shutdown a server on the same network using the shutdown command like we used to when it was xp (now w7 ultimate 64bit).

After spending days on this now trying various things...

added remote desktop users & everyone & interactive to the local policies for "force shutdown from a remote system" also tried adding the computer ie WORKGROUP\LAPTOP5 as well but it will the fail to save the database :huh:

also tried using the runas (runas /user:server/admin) which appears to work but the server doesnt shut down. You get and initshutdown audit success in the logs though.

FINALY, tryed disabling UAC and now shutdown works as expected!

so i dont want to really run it with UAC off do I?
so my question is how do i get around this are there more advanced settings for UAC rather than the slider that ive missed somewhere?

hope some one can help id be very gratefull

 

[acurasd]

Just a quick question.

If this is the server... Why wouldn't you want this computer to be ran in full admin.


UAC is just a warning sign it won't screw the computer up if you dont have it off...

its just an annoying POS if you keep it on... Your choice.

what i did with my server is that i made my server do an auto boot into the admin account and then the reg has a lock command so that the server still loads its programs but as soon as it goes into the account, it locks itself.

 

[mrbobpockett]

Hi there i wanted to keep uac on as it is sometimes used for some web use and id liked to have kept IE's protected mode on as you cant trust people to turn UAC on and off all the time.

I think ill take your sugestion onboard of having the admin account locked and having a standard user login for anybody that sits at at.

You'd think there would be more custom settings for UAC though really is it too much to ask for a box to tick allowing what i want rather than just a generic slider.

thanks for the reply

 

[acurasd]

The UAC is just to notify the user if he makes any major system changes.. ex. delete, undelte, uninstall programs, install programs.

I would do just that, If you are just going to use it as a server and leave the computer alone, you could leave it in ADMIN and then have the computer lock itself after boot up.

I mean or you can have it boot into a LIMTED user in which i would do s that way it doesn't have to lock itself but anyone tht wants to use the computer doesn't hav eo ome to you to ask for the password.


but if they try to uninstall or do any major changes to the computer... i will assure you that a nice little box asking for "your" admin password will come screaming their way. I did that on my moms computer because she has a tendency of not listening when i tell her to not download stuff she doesn't know about, especially when old ladies like to download screen savers with spyware hacked right into the exe file you know

 

[aem]

There are a few types and switches to apply. Here's a couple of commands.

shutdown /s /m \\victim - Shuts down a remote machine called 'victim'
shutdown /r /m \\exchange - Reboots a remote machine called 'Exchange'

http://www.computerperformance.co.uk/w2k3/shutdown.htm

Some Servers do not respond favorably with the normal Shart > Shutdown, a command will almost always work.

 

[surfasb]

It helps if we know what OS is on the remote server you are shutting down. I'm assuming it is either 2003 or 2008. Both should work fine.

Make sure you are using an elevated command prompt. The title bar of CMD.exe should say "Administrator."