Windows Terminal Server – Remove the Shutdown Command


KB ID 0000499 Dtd 29/08/11


I’m surprised that when you make a server a Terminal Services Server / Remote Desktop Services Server, that this does not get applied from an administrative template anyway, but it does not.

Why would you want to do this? Well users are used to hitting Start > Shutdown, when they are finished working, which is fine, unless they are in a terminal session with 500 other users and they’ve just issued a shutdown command to the server!


The simplest way to do this is run gpedit.msc on the server itself and remove shutdown through local group policy, but a far more elegant solution is create a domain group policy for the TS Server(s).

1. On a domain controller, ┬álaunch the “Group Policy Management Console”. Create a policy, and link it to the┬áOU┬áthat contains the Terminal Servers, you want to enforce the policy on, (Or edit an existing policy linked toy them).

2. Now remove the shutdown is a USER policy, and this is a COMPUTER policy we are writing, so it wont work unless we turn on “Loopback processing”. Navigate to Computer Configuration > Administrative Templates > System > Group Policy > User Group Policy loopback processing.

lookpback processing policy

3. In most cases you will already have user policies applied to your users, if so you will want to “Merge” this with them rather than replace them > Apply > OK.

merge lookpback processing policy

4. Now to remove the Shutdown command. Navigate to User Configuration > Administrative Templates > Start Menu and Taskbar > Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate Commands.

remove shutdown policy

5. Enable > Apply > OK.

remove shutdown policy

6. Then either reboot the TS Server(s), wait a couple of hours or run “gpupdate /force” on them.


Related Articles, References, Credits, or External Links


Author: Migrated

Share This Post On