I have a GPO to remove the shutdown/restart options on Server 2016. It works fine on member servers, but it does not work on DCs. I know this is probably a permissions issue but I am wary of making changes without checking with others who may have had to do this themselves.
The GPO was introduced when we deployed 2012 servers because the layout of the power options made it too easy for someone in a hurry to restart or shut down a server. I created another GPO to do the same, just using a different WMI filter when we started to install 2016. We are in the process of upgrading the domain to 2016 and need to make sure the option to accidentally shut down a DC is removed.
Anyone encountered this issue and, more importantly, have a solution to it?