Remote shutdown without admin rigths
Hi all!I has been trying to remote shutdown an X server without admin rights but dont work! if I run the same command with an admin right account works.The server Its a domain controller (Windows 2003) and in the default domain controller pollicyI allow the follows rights to the user:-Force shutdown from a remote system-Log on as a batch job-Shut down the system-Log on locallyNote: I run itthrough runas by script. Repeat, if I use an admin account in the script works fine....so its a rights issueIf I logon locally with that account I can shutdown the server.I test it in a lab with a clean domain and do not work.whats more rights are needed?whats can I do?In the security logs showsup 3 logs after run the script1:Event Type:Success AuditEvent Source:SecurityEvent Category:Logon/Logoff Event ID:538Date:11/29/2009Time:10:35:27 PMUser:NT AUTHORITY\SYSTEMComputer:DEN-DC1Description:User Logoff:User Name:DEN-DC1$Domain:CONTOSOLogon ID:(0x0,0x2BB70)Logon Type:32:Event Type:Success AuditEvent Source:SecurityEvent Category:Account Logon Event ID:672Date:11/29/2009Time:10:35:36 PMUser:NT AUTHORITY\SYSTEMComputer:DEN-DC1Description:Authentication Ticket Request:User Name:apagoSupplied Realm Name:CONTOSO.MSFTUser ID:CONTOSO\apagoService Name:krbtgtService ID:CONTOSO\krbtgtTicket Options:0x40810010Result Code:-Ticket Encryption Type:0x17Pre-Authentication Type:2Client Address:10.x.x.xCertificate Issuer Name:Certificate Serial Number:Certificate Thumbprint:3:Event Type:Success AuditEvent Source:SecurityEvent Category:Account Logon Event ID:673Date:11/29/2009Time:10:35:36 PMUser:NT AUTHORITY\SYSTEMComputer:DEN-DC1Description:Service Ticket Request:User Name:apago@CONTOSO.MSFTUser Domain:CONTOSO.MSFTService Name:DEN-CL1$Service ID:CONTOSO\DEN-CL1$Ticket Options:0x40800000Ticket Encryption Type:0x17Client Address:10.x.x.xFailure Code:-Logon GUID:{3ac8eb70-c331-ab85-f64b-6cebd5d30cb5}Regards!!!
November 30th, 2009 4:42am
Permission to do network logon?-= F1 is the Key =-
Free Windows Admin Tool Kit Click here and download it now
November 30th, 2009 8:13am
you need to grant at leastfollowing rights:Shutdown the systemForce shutdown from remote systemhttp://www.sysadmins.lv
November 30th, 2009 2:12pm
Well...
After try and try I got It!
Also the rights needed are "force shutdown from a remote system" but in the default domain policy, not only on thedefault domain controller policy.
Its working now!
Free Windows Admin Tool Kit Click here and download it now
December 1st, 2009 7:28am
there is a tool to automatically put computers into standby or wake them up at certain times or using WOL. The tool is build with IT Admins in mind, so there is a easyto use rule engine to control the power state of all computers in the network. You can shutdown, wakeup computers at certain times or if they are idle. enduse-rs are not affected in their productivity as computers in standby wakeup as fast as a screensaver. That helps consumers, schools and universities as well as companies significantly reduce their energy cost for IT and reduce their carbon footprint at the same time. Have a look at http://www.itpowersaving.com They claim that between 20% and 60% of Desktop PC are left on at night or over weekends at that even with 5 computers in your office network, electricity savings amount to $400 a year. University of Berkeley has evaluated the current leading power-saving solutions and eventually chose our software to automate campus PC power-saving. Read about their case at: http://greensoda.cs.berkeley.edu/w [...] hp/Desktop Univ of Berkley has also linked ASDM to wireless power meters in order to precisely measure actual energy saved vs. an estimate. As you can see their results are quite impressive. best regards, Babba
February 21st, 2010 11:35pm


