How to disable all options to turn off Windows at a certain time? (hardening)

Asked

Viewed 109 times

-1

Using regedit and system tools. Parameters to be blocked: Case: Imagine that you are setting up a PC/notebook for a user of the company of which you are network and IT manager. Your job is to apply the company’s security policies and rules to all the company’s equipment. For this, it is necessary to understand and apply some rules, such as: The employee can not turn off the computer when he wants, only at 18h. Therefore, you will need to remove all PC shutdown commands.

1 answer

1


Open the regedit (Window+R) and walk the path:

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Start\HideShutDown

Open the key "value" and change its value to 1.

Your Disconnect option has been removed for everyone, but all other options are still there. This includes the login screen and alt+ctrl+del screen.

Change to 0 to bring it back.

This just removes menu options and does not prevent shutdown of users with the policy of issuing the shutdown command via a separate command or program.

To remove from an already configured profile, change the associated keys in:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Start

It is interesting to keep a user profile for the employee and so it will be easier to perform the locks you want without disturbing the general registration.

This does not prevent users:

running other programs that perform these functions. For example, at the command prompt, they can execute: "shutdown /s" to shut down the computer or "shutdown /r" to restart the computer.

and also does not prevent users to do logoff from Windows and turn off or restart the computer by pulling the power cable, disconnecting the source or pulling the plug pin.

Tip for Windows 10:

There is the Group Policy Editor, but the Group Policy Editor is only available in Pro, Enterprise and Education editions of Windows 10, and not in Windows 10 Home.

More information is provided on these pages:

https://www.thewindowsclub.com/remove-shutdown-power-button-login-start-menu https://www.online-tech-tips.com/computer-tips/prevent-shutdown-of-windows/

In the case of "Group Policy Editor" (Win+R and gpedit.Msc), you can add/remove specific groups of users to allow/prevent them from switching off the system.

(Win+R and gpedit.Msc)

Configuração do computador-> Configurações do Windows-> Configurações de segurança-> Políticas locais-> Atribuição de direitos do usuário-> Desligar o sistema

I hope I’ve helped.

Browser other questions tagged

You are not signed in. Login or sign up in order to post.