Change the default Shutdown / Log Off Option via GPO

KB ID 0000465 

Problem

Out of the box, the default power option presented to your users is shutdown. People with multiple users on their machines, may prefer the log off option to be the default.

Note: You can also set the default option to:

Shutdown
Sleep
Log off
Lock
Restart
Switch User (Unless blocked by other policy then it will revert to shutdown).
Hibernate

 

Solution

1. On your domain controller , Start > Administrative Tools > Group Policy Management Console > Either create a new policy and link it to your targeted COMPUTERS or edit an existing one, then navigate to;

[box]
User Configuration > Policies > Administrative Templates > Start Menu and Taskbar
[/box]

Locate the setting “Change Start Menu power button”.

2. Edit to the required action, i.e. Log off.

3. Then either reboot the clients, wait a couple of hours, or manually run “gpupdate /force” on them.

 

Related Articles, References, Credits, or External Links

Thanks to Seb Cerazy for the feedback

Windows Crashes and Reboots when Unlocked

KB ID 0000145 

Problem

This is seen on Windows 7 Clients, when logged onto a domain, after unlocking the machine. If you inspect the Event Log you will see Event ID 1015

“A critical system process, C:Windowssystem32lsass.exe, failed with status code 255. The machine must now be restarted.”

 

Solution

I put up with this for a while, and did a lot of Internet searching, some people suggested power settings and a host of other stuff, nothing worked, The final solution was found on “Technet”, it involves changing the authentication method to the domain, and needs a registry change.

1. Start > In the Start Search box type type regedit > {enter}
2. Navigate to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaKerberosParameters
3. Create a New DWORD entry called DefaultEncryptionType
4. Set its value to (decimal) 23 or (Hexadecimal) 0x17
5. Reboot the machine.

Or If you are feeling lazy just download this, extract and run it, then click “Yes” to add it to the registry, and reboot.

 

Related Articles, References, Credits, or External Links

NA