Announcement

Collapse
No announcement yet.

Shutdown

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Shutdown

    Is there a way to disable the shutdown debugger, to prevent users from shutting remote systems down?

  • #2
    Re: Shutdown

    What sort of remote systems (OS etc?)

    If windows, do you mean using "shutdown.exe -m" ?
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: Shutdown

      Windows XP/7

      You can use shutdown -i for an interactive debugger console

      Comment


      • #4
        Re: Shutdown

        You could use software restriction policies in a GPO
        Tom Jones
        MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
        PhD, MSc, FIAP, MIITT
        IT Trainer / Consultant
        Ossian Ltd
        Scotland

        ** Remember to give credit where credit is due and leave reputation points where appropriate **

        Comment


        • #5
          Re: Shutdown

          How would I go about doing that?

          Comment


          • #6
            Re: Shutdown

            wouldn't you find it's only administrators who have acccess to shutdown a machine anyway? (on a desktopm it;s a bit different i guess)
            Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

            Comment


            • #7
              Re: Shutdown

              I do mean a normal desktop computer.

              Comment


              • #8
                Re: Shutdown

                Is it in a domain?
                Tom Jones
                MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                PhD, MSc, FIAP, MIITT
                IT Trainer / Consultant
                Ossian Ltd
                Scotland

                ** Remember to give credit where credit is due and leave reputation points where appropriate **

                Comment


                • #9
                  Re: Shutdown

                  Yes, it is. 2K8 R2 level domain, Win7 Workstation

                  Comment


                  • #10
                    Re: Shutdown

                    OK, so (as previously suggested) Software Restriction Policies will allow you to disable shutdown.exe
                    http://www.google.co.uk/#sclient=psy....,cf.osb&cad=b

                    Are all your users admins on every machine - if so, removing admin rights is a very good first step (as tehcamel indicated above)
                    Tom Jones
                    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                    PhD, MSc, FIAP, MIITT
                    IT Trainer / Consultant
                    Ossian Ltd
                    Scotland

                    ** Remember to give credit where credit is due and leave reputation points where appropriate **

                    Comment


                    • #11
                      Re: Shutdown

                      something else to consider here.

                      if you remove the access to allow shutdown, how are they going to be shutting their own wrokstations down daily/whenever?
                      Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

                      Comment


                      • #12
                        Re: Shutdown

                        Is the shutdown right the same as running shutdown.exe?
                        Tom Jones
                        MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                        PhD, MSc, FIAP, MIITT
                        IT Trainer / Consultant
                        Ossian Ltd
                        Scotland

                        ** Remember to give credit where credit is due and leave reputation points where appropriate **

                        Comment


                        • #13
                          Re: Shutdown

                          Originally posted by Ossian View Post
                          Is the shutdown right the same as running shutdown.exe?
                          For using the shutdown.exe tool in particular the user need "Shut down the system" as wel as "Remote Shutdown" security privileges! By default only members of the local administrators group can use shutdown.exe and can use it to shutdown a remote computer as well.
                          Regular users have "Shut down the system" by script rights by default but can not use the shutdown.exe not even against their local computer, but they can use for example a vbscript for shutting down their own computer because of the privilege. They are however not able to shutdown remote computers in any way.


                          "Shut down the system" and "Remote Shutdown" privileges can be controled by GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\
                          But there is no policy there where you can take these privileges from users that are having them by default.

                          For your case Kyuki, where users apparently are local administrors use the Software Restriction Policies.

                          /Rems
                          Last edited by Rems; 16th December 2011, 15:33.

                          This posting is provided "AS IS" with no warranties, and confers no rights.

                          __________________

                          ** Remember to give credit where credit's due **
                          and leave Reputation Points for meaningful posts

                          Comment

                          Working...
                          X