Hello,
I'd like to disable the shutdown/restart buttons on Windows 10 Anniversary Enterprise workstations while employees are logged in via RDP. We have a number of people who connect to their PCs remotely, and accidentally hit the shutdown button requiring a manual startup of the PC in the office.
However, when actually at the desk we want them to be able to shut down their PCs when logged in locally. I see that by doing a whoami /groups that remote desktop users are a member of 'Remote Interactive Logon' group and the INTERACTIVE group, and users logged on directly to the console session of the machine (at the keyboard) are listed as INTERACTIVE
Is there any way to filter between INTERACTIVE and Remote Interactive Logon groups? Is there any way to allow shutdown for users seated at the workstation but not when logged in remotely?
Windows 7 seems to work this way out of the box.
Is there something I am missing here?
Desired Settings by User:
- Underprivileged User #1 via RDP: Disconnect, Log Off (Can't Shutdown)
- Underprivileged User #1 Logged In at Workstation: Disconnect, Restart, Shutdown, etc(Full Control)
- Administrator via RDP: Disconnect, Restart, Shutdown, etc (Full Control)
- Administrator Logged in at workstation: Disconnect, Restart, Shutdown, etc(Full Control)
Thanks!