how to prevent users from shutdown my RDP server 2012 R2?

Question

I have a server RDP for specific users, and they shut down the server by mistake, I want to prevent these users from shutdown the server.

I have to give them administrator local and remote desktop groups.

they are Domain users, each user in a different department.

how can I prevent them from shutdown the server 2012 R2?

grawity_u1686 · Accepted Answer · 2022-05-15 09:03:54Z

0

Don't give them the local Administrator group in the first place. Most likely your users only need a few more precise rights assignments (e.g. file ACLs or printer ACLs or similar), not the full set of Admin rights.
Through "Security Settings" (secpol.msc or GPO) → "Local Policies" → "User Rights Assignment", find the right "Shut down the system" and replace its 'Administrators' entry with something else that includes only real administrators.

answered May 15, 2022 at 9:03

grawity_u1686

465k66 gold badges977 silver badges1.1k bronze badges

i'll try your solution
– Akram Mokhtar
Commented May 15, 2022 at 9:37
they cannot remote desktop to this server without the administrator local Group , I tried only the Remote Desktop Group but it didn't work ,so I have no choice rather than add them to administrator Local Group ,by the way it's old windows 2012 R2
– Akram Mokhtar
Commented May 15, 2022 at 9:39
@AkramMokhtar: Being able to RDP (interactive login) is also a system right that you can grant though secpol, and is not necessarily limited to admins.
– grawity_u1686
Commented May 15, 2022 at 17:31
@user186 i don't understand what u mean by grant though secpol?
– Akram Mokhtar
Commented May 17, 2022 at 8:44

Add a comment |

1 Answer 1