Windows 10: Allow or Prevent Users and Groups to Shut down System in Windows 10

How to: Allow or Prevent Users and Groups to Shut down System in Windows 10

How to Allow or Prevent Users and Groups to Shut down System in Windows 10


If you don't plan to use your PC for a while, then you could fast startup.

Each group in Windows has its own default rights and permissions. When a user is a member of a group, the user will be assigned the rights and permissions of the group.

Default Users and Groups Allowed to Shut Down the Computer:

• On a Local Computer or Workstation (ex: home computer): Administrators, Backup Operators, Users
• On a Server: Administrators, Backup Operators
• On Domain: Administrators, Backup Operators, Server Operators, Print Operators

See also: Shut down the system - security policy setting (Windows 10) | Microsoft Docs

This tutorial will show you how to allow or prevent specific users and groups from being able to shut down the system in Windows 10.

*note You must be signed in as an administrator to allow or prevent users and groups to shut down the system.


CONTENTS:

• Option One: Allow Users and Groups to Shut down System in Local Security Policy
• Option Two: Prevent Users and Groups to Shut down System in Local Security Policy
• Option Three: Allow or Prevent Users and Groups to to Shut down System in Command Prompt

OPTION ONE [/i] Allow Users and Groups to Shut down System in Local Security Policy
*note Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Three below.
1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

2. Expand open Local Policies in the left pane of Local Security Policy, click/tap on User Rights Assignment, and double click/tap on the Shut down the system policy in the right pane. (see screenshot below)



3. Click/tap on the Add User or Group button. (see screenshot below)



4. Click/tap on the Advanced button. (see screenshot below)



5. Click/tap on the Object Types button. (see screenshot below)



6. Check all the boxes for Object types, and click/tap on the OK. (see screenshot below)



7. Click/tap on the Find Now button, select the name of the user or group (ex: "Users") you want to add, and click/tap on OK. (see screenshots below)

*tip If you like, you can press and hold the Ctrl key to select more than one user and/or group.





8. Click/tap on OK. (see screenshot below)



9. Click/tap on OK. (see screenshot below)



10. When finished, you can close Local Users and Groups if you like.





OPTION TWO [/i] Prevent Users and Groups to Shut down System in Local Security Policy
*note Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Three below.
1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

2. Expand open Local Policies in the left pane of Local Security Policy, click/tap on User Rights Assignment, and double click/tap on the Shut down the system policy in the right pane. (see screenshot below)



3. Select the user or group (ex: "Users") you want to remove, and click/tap on the Remove button. (see screenshot below)

*tip If you like, you can press and hold the Ctrl key to select more than one user and/or group.



4. Click/tap on OK. (see screenshot below)



5. When finished, you can close Local Users and Groups if you like.





OPTION THREE [/i] Allow or Prevent Users and Groups to Shut down System in Command Prompt
1. If you haven't already, you will need to do the following below before continuing on to step 2 below.
A) Download the ntrights.exe file below from the Windows Server 2003 Resource Kit Tools.
Download
B) Save the ntrights.zip file to your desktop, and unblock it.

C) Open the ntrights.zip file, copy or move the ntrights.exe file into your C:\Windows\System32 folder, and click/tap on Continue to approve.
2. Open an elevated command prompt.

3. Type the command you want below into the elevated command prompt, and press Enter.
(Add user or group to allow)
*Arrow ntrights +r SeShutdownPrivilege -u "User or Group"

OR

(Remove user or group to prevent)
*Arrow ntrights -r SeShutdownPrivilege -u "User or Group"

*note Substitute User or Group in the command above with the actual name of the user or group (ex: "Users") you want to add or remove for this policy.

For example: ntrights +r SeShutdownPrivilege -u "Users"
4. When finished, you can close the elevated command prompt if you like.

That's it,
Shawn


Related Tutorials

• How to Add or Remove Users from Groups in Windows 10
• How to Change User Rights Assignment Security Policy Settings in Windows 10
• How to Shut Down the Computer in Windows 10
• How to Add Shut down Context Menu in Windows 10
• How to Create a 'Slide to Shut down' Shortcut in Windows 10
• How to Read Shutdown Event Logs in Windows
• How to Enable or Disable Shutdown Event Tracker in Windows 10
• How to Play Sound at Shutdown in Windows 10
• How to Add or Remove Power Menu Icon on Sign-in Screen in Windows 10
• How to Enable or Disable Shut Down, Restart, Sleep, and Hibernate in Power Menu in Windows 10

:)

 

Show Local users and Groups


Hello Frank, and welcome to Ten Forums.

If you have the Windows 10 Home edition, then it will not have Local Users and Groups (lusrmgr.msc) included in it. It's only available in the Pro and Enterprise editions instead.

If you like, you could use step 3 in OPTION THREE of the tutorial below list users in a group.

https://www.tenforums.com/tutorials/6...a.html#option4

 

Windows 10 error: "Windows couldn't connect to the Group Policy Client service. Please consult your system administrator"

Hi Rico,

Thank you for posting in Microsoft Community, we appreciate your interest in Windows 10.

I understand the inconvenience you are facing with accessing the operating system.

Do let us know the following to assist you better:

• Which edition of Windows Operating System are you using?
• What all the troubleshooting steps have you performed?
• Have you installed all the pending updates on your Operating System?
• Have you installed any third-party anti-virus software on your system?

I suggest you to try few of the below troubleshooting steps and check if it helps.

I suggest you to Stop the Group Policy service, restart and set it to Automatic.

Group Policy Client service, this service is responsible for applying settings configured by administrators for the computers and users through the Group Policy component. If the service
is disabled the settings will be applied and applications and components will not be manageable through Group Policy.

Step 1: Stop the Group Policy Client service.

• Press Windows Key + R on the keyboard and type
  services.msc, Services window gets opened.
• Search for Group Policy Client service, right click on it and click on
  Stop.
• Restart the computer.

Step 2: Start the service and set it to automatic:

• Press Windows Key + R on the keyboard and type
  services.msc, Services window gets opened.
• Search for Group Policy Client service, right click on it and click on
  Properties.
• Start the service, set
  Startup type to Automatic.

Hope it helps. Reply to the post with an updated status of this issue for further assistance.

 

Windows 10 Tweaks

Pressing “Windows+Pause Break” (it’s up there next to scroll lock) opens the “System” Window.

Windows 10: In the new version of Windows, Explorer has a section called Quick Access. This includes your frequent folders and recent files. Explorer defaults to opening this page when you open a new window. If you’d rather open the usual This PC, with links to your drives and library folders, follow these steps:

• Open a new Explorer window.
• Click View in the ribbon.
• Click Options.
• Under General, next to “Open File Explorer to:” choose “This PC.”
• Click OK

credit to Lifehacker.

 

Download Windows 10 TH/RS

New CU for Anniversary Update. Brings system to 14393.726

KB 3216755 (January 26)

Pretty important update. Brings lots of fixes and installs without issues.

Download:

x64 [1.02 GB]

x86 [562 MB]


Addressed known issue called out in KB3213986—Users may experience delays while running 3D rendering apps with multiple monitors.

• Addressed issue that prevents the conversion of a 24-bit image to 32 bits.

• Addressed issue that causes the loss of Windows Firewall rules after upgrade from RTM to 1511 or 1607.

• Addressed issue that causes a file download from a webpage to fail in Internet Explorer and Microsoft Edge browsers.

• Addressed issue that prevents the use of the Delete Browsing History feature in Internet Explorer.

• Addressed issue that loads websites that bypass the proxy server in the local intranet zone when the Intranet Sites: Include all sites that bypass the proxy server (Disabled) is set.

• Addressed issue where an XSS false positive prevents a webpage from loading after logging in to a site.

• Addressed issue that prevents users from connecting to a network

• Addressed issue that causes the Local Security Authority Subsystem Service (LSASS) to fail if Active Directory Federated Systems is using the Japanese language set

• Addressed issue that causes System Center Operations Manager (SCOM) scenarios to fail

• Addressed issue that prevents user-built keyboard events from working.

• Addressed issue that causes incorrect table dimensions in SAP® applications

• Addressed issue that overwrites a <br>element when users select a line that is enclosed by a <span> element.

• Improved reliability of Internet Explorer, Xbox, and Skype

• Addressed additional issues with Bluetooth, Internet Explorer, engaged reboot, clustering, Internet Explorer, Japanese Input Method Editor (IME), Windows Shell. Networking, storage, fonts, Xbox, encryption, Group Policy, Point and Print, wireless networking, virtual disk, disk operations, multimedia, Work Folders, encryption, enterprise security, deduplication, domain controllers, Audit File System, Debug Memory Manager, Virtual Machine Management Service (VMMS), Remote Desktop, Task Scheduler, Microphone Wizard, .NET, font cache, system boot, and Surface Studio

 

Allow the second user to access particular programs

Hi Marisa,

It depends on the Windows build because if you use Windows 10 Home build, Microsoft doesn’t provide an option to give access to the particular programs. However if you use Windows 10 Pro build, it is possible to give access to the particular applications.

Follow the steps:

Go to the Group Policy window - scroll down to User Configuration - Administrative Templates - System

On the right pane, find the settings for Run only specific Windows applications and double click on it to find Properties.

Tap on the Enabled, then click on the Show.

When you are in the Show Contents window, tap each line in the list and type in the name of the executable you want users to be able to run.

Once done, click on ok.

Shut down Local Group Policy