Restrict Shutdown
If you're sharing a single XP machine with multiple users, and more than one person is currently logged on, you will receive the following message when you try to shut down the computer:[View full size image]
Shutting down XP is a dramatic event because all recent changes to open files can be lost. During a normal shutdown, therefore, XP tries to store any recent changes to the hard disk before powering down. For example, if you choose Start | Shut Down with a Word document open, XP will ask if you'd like to save your document first.If any other users are logged on, though, they will not enjoy this courtesy. A user working on a Word document, for example, will lose any unsaved changes. That user's programs are closed, and recent changes are subject to loss when the system shuts down.Therefore, it can be of great benefit to restrict shutdown ability to just a single useryou. Let's say, for example, that the kids also have a user account because they use the computer for homework and games, but you don't want them to be able to shut down the computer. You can achieve this goal with a Group Policy setting.To do so, follow these steps:| 1. | Click Start | Run and then type gpedit.msc to open the Local Group Policy Editor. |
| 2. | Expand Computer Configuration | Windows Settings | Security Settings | Local Policies, select User Rights Assignment, and then double-click on the "Shutdown this system" policy setting. |
You see the dialog box shown in Figure 3-7. By default, only members of these groups have permission to shut down: Administrators, Users, Power Users, and Backup Operators.
Figure 3-7. Limit the ability to shut down with this Group Policy Setting.
