How do I prevent normal users from initiating a reboot on terminal servers?

I've tried to set this in the registry:

HKLM\SOFTWARE\Policies\Microsoft\Microsoft Antimalware\UX Configuration

REG_DWORD - UILockdown = 1

But that prevents administrators to run SCEP as well.

So that's not a solution for us. Does anybody have an ideas?

Regards

Brian Thams

• Edited by B.Thams 52 minutes ago

SCEP has nothing to do with preventing reboots. That registry key is simply (b)locking the UI of SCEP. Not sure what the reason is why you're trying this, but to prevent reboots I would look at GPOs.