How to Prevent Child Account to Shut Down Windows 8

5

3

I am using Windows 8.1 and I have set a child account for my son. When he wants to use the computer, I switch to his child account without signing out from my account (because i have a lot of open documents that I still work on and don't want to close them yet). One day, when he finishes using the computer, he shut down the computer immediately. When the computer is shut down, I lose all of my open documents. It is a disaster indeed. Is there a way to disable child account's power button at the charm bar or at least to disallow shut down if other accounts are still on?

Robith Nuriel Haq

Posted 2014-02-20T01:56:29.343

Reputation: 135

Answers

4

Solution

There are different ways to shutdown the system, so you have to take that into account in order to avoid the issue entirely.

Preliminary steps

  1. Make sure the user accounts you want to restrict are logged off.
  2. Log on with an administrator account, and open an elevated command prompt.

Disable all shutdown buttons and menus for a specific user

  1. Type or paste the following command in the command prompt by replacing <User> with the actual folder, then press Enter:

    reg load "HKU\User" "%SystemDrive%\Users\<User>\NTUSER.DAT"
    
  2. Execute the commands below:

    reg add "HKU\User\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoClose" /t REG_DWORD /d 1 /f
    reg unload "HKU\User"
    
  3. Repeat steps 1-2 for any other user you want to limit.

Revoke shutdown privileges assigned to standard users

  1. Download the Windows Server 2003 Resource Kit Tools.

  2. Extract the rktools.exe downloaded file using 7-Zip.

  3. Open the folder containing the extracted files, and extract the rktools.msi through 7-Zip. Among all the files there's one called ntrights.exe.

  4. Navigate to the folder containing ntrights.exe by running the commands below after replacing the folder path inside quotes:

    cd /d "X:\Some\folder"
    ntrights.exe -u Users -r SeShutdownPrivilege
    ntrights.exe -u Users -r SeRemoteShutdownPrivilege        
    

Remove shutdown button on the logon screen

Execute this command:

reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ShutdownWithoutLogon" /t REG_DWORD /d 0 /f

References

and31415

Posted 2014-02-20T01:56:29.343

Reputation: 13 382

Thank you. I think this solution works better. It prevents my child's account, and possibly other accounts, to shutdown computer but allows me to turn it off by using my own account without hassle. I think I am also a little bit encouraged to delve into this ntrights.exe. – Robith Nuriel Haq – 2014-02-23T02:42:46.050

2

Try the following.

  1. Press enter image description here + R and put gpedit.msc in Run dialog box. Press Enter.
  2. In Group Policy window will pop up from which choose User Configuration - Administrative Templates - Start Menu & Taskbar from the Left Panel as shown below. enter image description here.
  3. Now on the Right Panel, double-click on Remove And Prevent Access To Shut Down Command.
  4. A pop will appear set it to Enabled. Then you’ll notice that this will remove the shutdown option from the Start Menu and security dialog box. enter image description here

stderr

Posted 2014-02-20T01:56:29.343

Reputation: 9 300

Your tutorial is about disabling shutdown button on logon screen. This is actually not my problem because my son shuts down Windows using power button on the charm bar (the black bar that pops up on the right) after he is logged on his child account. Usually, when you shut down computer while there are other users who are logged on, Windows will show a warning saying "Someone else is still using this PC. If you shut down now, they could lose unsaved work." I can say that this warning is useless because the shut down process can still proceed with a press of button, which my son can easily do. – Robith Nuriel Haq – 2014-02-20T13:37:35.150

@RobithNurielHaq updated the answer, hope it can help you. – stderr – 2014-02-20T15:12:38.603

@TiagoƇ. Those steps won't really disable the charms bar, which would still be accessible by using the keyboard shortcut (Win+I). Also, there are other ways to shutdown Windows.

– and31415 – 2014-02-20T15:47:18.803

@and31415 I rephrase the answer, see if the shutdown is still accessible. Thank you. – stderr – 2014-02-20T16:31:35.070

That's better, but still not enough. Anyway, the Group Policy Editor is only available in the Pro/Enteprise editions. – and31415 – 2014-02-20T16:40:49.387

@and31415 - You should clarify your edition of Windows 8 in your answer. This is still an acceptable answer. – Ramhound – 2014-02-22T18:26:55.213

@Ramhound I never said it wasn't acceptable, but disabling access to some buttons etc. won't actually prevent users from shutting down the system by other means (e.g. shutdown /s). Also, if the OP is using the core/standard edition he wouldn't have access to the Group Policy Editor. My answer is not targeted to any particular flavor. – and31415 – 2014-02-22T18:53:37.233

1@TiagoƇ, thank you. I know that there are many interesting hidden things in the Group Policy. I am using Pro edition, so I don't have problem with accessing GP editor. But do I have to open GPedit whenever I want to switch account between mine and my son's? Those steps indeed disable access to power options on the charm bar (they even disable access to Alt+f4), so when I leave the policy you mention always enabled, I myself cannot shutdown the computer using my account without firstly disabling that policy. But thanks anyway. at least i can keep my data secured when I switch account. – Robith Nuriel Haq – 2014-02-23T02:27:22.703