Announcement

Collapse
No announcement yet.

Restart by non-administrator?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Restart by non-administrator?

    Had a non-administrator load an Acrobat 9 update today, and was surprised when the terminal server restarted. Running Server 2008 R2 Std. Have verified that the user is not a member of any of the administrator groups. The event log indicates 1038, Installer requires a system restart, and is logged by the non-administrative user. We had 50 people lose 15 minutes of productivity due to the restart.

    Anyone else seen this behavior or know of a way (other than disabling the installer) of preventing a non-admin from restarting a remote desktop server?

    Thanks.

  • #2
    Re: Restart by non-administrator?

    Check the local policy on the server (gpedit.msc) and review the local rights (User Rights Assignments-->Shutdown the System) related to who can shutdown the server. You can modify the right accordingy to your needs.
    ________
    jailbreak
    Last edited by [JM]; 24th January 2011, 18:15.
    JM @ IT Training & Consulting
    http://www.itgeared.com

    Comment


    • #3
      Re: Restart by non-administrator?

      Or better, use a GPO for it instead of a local policy.
      Marcel
      Technical Consultant
      Netherlands
      http://www.phetios.com
      http://blog.nessus.nl

      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
      "No matter how secure, there is always the human factor."

      "Enjoy life today, tomorrow may never come."
      "If you're going through hell, keep going. ~Winston Churchill"

      Comment

      Working...
      X