Shutdown still available on Ctrl+Alt+Del screen despite being disabled from group policy on Windows 10

2

2

We're experiencing an issue on Windows 10. When disabling the Shutdown option for users via Group Policy, the option disappears from the Start Menu, but doesn't disappear on the Ctrl+Alt+Del screen.

We're using the "User Configuration\Administrative Templates\Start Menu and Taskbar\Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands " policy setting, or alternatively we're setting the

"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose" registry key to 1

Using the exact same settings properly disabled the Ctrl+Alt+Del screen using the previous versions (we tested on Win7 and Windows 8.1).

According to this page, this setting should still disable shutdown and restart on the Ctrl+Alt+Del screen:

https://technet.microsoft.com/en-us/library/mt484191%28v=vs.85%29.aspx

Can someone offer some insight on this issue?

Is this something that changed in Windows 10, or is it a bug? If it's a change, how can we accomplish this on Win 10?

torgabor

Posted 2016-01-28T14:05:33.210

Reputation: 21

This behavior limited to just a single user or all users on the domain? I tested it on my machine and the policy works. You are using Version 1511 and the current build? – Ramhound – 2016-01-28T15:30:39.350

Hi! The setting is supposed to be set only for a single user. I'm using version 10.0.10240 which is a bit old, will try a newer one if I get a chance. – torgabor – 2016-01-28T16:21:28.940

The link you provided applies to the current build of Windows 10, while I don't believe that to be a possible explanation for the behavior, the current version should be used whenever possible. So are you modifying the domain policy or the local domain policy if its only a single user? – Ramhound – 2016-01-28T16:25:27.353

Here is a link from the server fault wizards. Hopefully the Ctrl+Alt+Del method works for you.

– DrZoo – 2016-01-28T18:52:28.193

I've tested the behavior with build 10.0.10586. I'm editing the local group policy. – torgabor – 2016-01-29T10:21:55.167

@DrZoo thanks for the link! Setting the machine wide Group policy from registry, [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] "NoClose"=dword:00000001 – torgabor – 2016-02-01T11:56:30.623

@torgabor did that do the trick? – DrZoo – 2016-02-01T14:00:17.047

When you run the rsop.msc command, what does it show? Does it show the command as disabled? Have you tried gpupdate /force? – Luiz Angelo – 2016-02-01T18:59:39.677

@DrZoo Yup, it did. Somehow, when editing my post, I managed to chop off the end :( My bad. – torgabor – 2016-02-01T22:37:02.077

@torgabor awesome! Put it as an answer and mark it as answered – DrZoo – 2016-02-02T01:33:42.290

Answers

-1

You can also set who is allowed to Shutdown the system from Computer "Configuration > Windows Settings > User Rights Assignments > Shut down the system".

To remove Task Manager go to "User Configuration > Administrative Templates > All Settings > Remove Task Manager"

jarvis

Posted 2016-01-28T14:05:33.210

Reputation: 195

1Hi! Removing the current user Configuration > Windows Settings > User Rights Assignments > Shut down the system". doesn't disable the Shutdown from the Ctrl+Alt+Del page either. Also I don't want to disable the Task manager – torgabor – 2016-01-28T14:51:47.313

-1

Try this "User Configuration > Administrative Templates > Start Menu & Taskbar > Remove And Prevent Access To Shut Down Command"

jarvis

Posted 2016-01-28T14:05:33.210

Reputation: 195

1Hi! We've already tried that, as I mentioned in my post. – torgabor – 2016-01-28T15:11:09.927

Asked: 2016-01-28T14:05:33.210

Viewed: 3 604 times

Active: 2016-01-28T15:01:05.617