"Force shutdown from a remote system"
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
"Force shutdown from a remote system" <-> 10-13-2006
Posted by on October 13, 2006, 3:26 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
What do they really mean by this? I was able to shut down a server with no
users having this user right, using terminal services. I took everyone out
of this user right, and I refreshed the policy then connected to the server
via terminal services, and proceeded to shut it down, no problem. What kind
of tool does this policy expect the remote user is going to be using to
accomplish the shutdown? 'Cuz it sure ain't terminal services.

Any ideas appreciated.



Posted by Shenan Stanley on October 13, 2006, 3:46 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
- wrote:
> What do they really mean by this? I was able to shut down a server
> with no users having this user right, using terminal services. I
> took everyone out of this user right, and I refreshed the policy
> then connected to the server via terminal services, and proceeded
> to shut it down, no problem. What kind of tool does this policy
> expect the remote user is going to be using to accomplish the
> shutdown? 'Cuz it sure ain't terminal services.
> Any ideas appreciated.

Who are 'they" and where are you getting this from?
IE: methinks you left out a few details.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html



Posted by Roger Abell [MVP] on October 13, 2006, 4:11 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
>- wrote:
>> What do they really mean by this? I was able to shut down a server
>> with no users having this user right, using terminal services. I
>> took everyone out of this user right, and I refreshed the policy
>> then connected to the server via terminal services, and proceeded
>> to shut it down, no problem. What kind of tool does this policy
>> expect the remote user is going to be using to accomplish the
>> shutdown? 'Cuz it sure ain't terminal services.
>> Any ideas appreciated.
>
> Who are 'they" and where are you getting this from?
> IE: methinks you left out a few details.
>

I believe the "they" is MSFT when "this" user right
was given a descriptive name, which differs in XP
where it is "Force shutdown from a remote system"

Roger

> How To Ask Questions The Smart Way
> http://www.catb.org/~esr/faqs/smart-questions.html
>



Posted by Shenan Stanley on October 13, 2006, 4:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
- wrote:
> What do they really mean by this? I was able to shut down a
> server with no users having this user right, using terminal
> services. I took everyone out of this user right, and I
> refreshed the policy then connected to the server via terminal
> services, and proceeded to shut it down, no problem. What kind
> of tool does this policy expect the remote user is going to be
> using to accomplish the shutdown? 'Cuz it sure ain't terminal
> services. Any ideas appreciated.

Shenan Stanley wrote:
> Who are 'they" and where are you getting this from?
> IE: methinks you left out a few details.

Roger Abell [MVP] wrote:
> I believe the "they" is MSFT when "this" user right
> was given a descriptive name, which differs in XP
> where it is "Force shutdown from a remote system"

Ah.. Thanks Roger.
I appreciate the clarification.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html



Posted by Roger Abell [MVP] on October 13, 2006, 3:47 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Generally speaking a terminal services login is considered
to be a local login as there is a winstation session.
Remote login is via such as a WMI shutdown command,
which is a small network transmission.

> What do they really mean by this? I was able to shut down a server with
> no users having this user right, using terminal services. I took everyone
> out of this user right, and I refreshed the policy then connected to the
> server via terminal services, and proceeded to shut it down, no problem.
> What kind of tool does this policy expect the remote user is going to be
> using to accomplish the shutdown? 'Cuz it sure ain't terminal services.
>
> Any ideas appreciated.
>



Similar ThreadsPosted
Component Services Remote Shutdown Permissions November 9, 2005, 4:09 am
Hide system processes monitoring to remote computers under XP November 7, 2007, 6:19 am
Force reboot in WSUS September 22, 2005, 3:55 pm
Use of Kerberos unreliable, can I force it? July 17, 2008, 5:03 am
Force password change at next logon. October 14, 2008, 6:49 am
Virtual Task Force Nabs 565 Cyber Criminals May 23, 2006, 7:18 pm
How to force a (the same !) user to logon when connecting to a network shared folder ? March 4, 2007, 8:19 am
Is it possible to use "Run As" in a shutdown script? January 7, 2006, 11:01 am
shutdown logfile January 21, 2006, 6:29 am
Strange Message on Shutdown...! July 13, 2005, 7:22 pm

The site map in XML format XML site map

Contact Us | Privacy Policy