Allow standard users to RPC reboot server - Revision history

Michael.mast: /* Script */

2018-10-25T21:26:00Z

Script

Michael.mast: /* Script */

2018-10-25T21:25:27Z

Script

Michael.mast at 19:22, 17 October 2018

2018-10-17T19:22:22Z

Michael.mast: /* Script */

2018-10-17T19:19:49Z

Script

Michael.mast: Created page with "==Purpose== I have a server that I like to pretend does not exist (like I do with most of my Windows servers). This system is dedicated to one department, so it makes sense to..."

2018-10-17T14:55:45Z

Created page with "==Purpose== I have a server that I like to pretend does not exist (like I do with most of my Windows servers). This system is dedicated to one department, so it makes sense to..."

New page

==Purpose==
I have a server that I like to pretend does not exist (like I do with most of my Windows servers). This system is dedicated to one department, so it makes sense to allow them the ability to reboot the server.
==Permissions==
Going into this I assume standard users can not use RPC shutdown. So in this case we need to allow them to reboot without being able to break anything.
<br>
<ref>https://superuser.com/questions/332548/how-can-i-allow-non-administrators-to-use-shutdown-exe</ref>
*Open secpol.msc
*Navigate to Local Policies -> User Rights Assignment -> Force shutdown from a remote system
*Add the user or group you want to allow remote shutdown rights to.
==Script==
Obviously we can not simply tell people what to type into a terminal. Also they would not know if the system was back online or not anyway.

@@ Line 12: / Line 12: @@
 <br>
 <br>
-This is a WIP, has not been tested yet. Just wanted to get it recorded<ref>https://stackoverflow.com/questions/21245545/ping-test-using-bat-file-trouble-with-errorlevel</ref><ref>https://stackoverflow.com/questions/1788473/while-loop-in-batch</ref><ref>https://ss64.com/nt/set.html</ref><ref>https://stackoverflow.com/questions/132799/how-can-you-echo-a-newline-in-batch-files</ref>
+This is a WIP, has not been tested yet. Just wanted to get it recorded<ref>https://stackoverflow.com/questions/21245545/ping-test-using-bat-file-trouble-with-errorlevel</ref><ref>https://stackoverflow.com/questions/1788473/while-loop-in-batch</ref><ref>https://ss64.com/nt/set.html</ref><ref>https://stackoverflow.com/questions/132799/how-can-you-echo-a-newline-in-batch-files</ref><ref>https://superuser.com/questions/566738/windows-batch-file-if-else-usage</ref>
 <pre>
 @echo off

@@ Line 17: / Line 17: @@
 set numa=0
 set numb=0
-set server=<yourserver>
+set server=server.tld
 :Reboot server
 shutdown /r /t 0 /m \\%server%
 if errorlevel 1 (
-	echo "Was unable to reboot the server, contact the helpdesk."
+	echo Was unable to reboot the server, contact the helpdesk. & pause
-	pause
+	exit)
+	 if errorlevel 0 (echo Waiting ~60 seconds for %server% to go offline... & goto pingtest1)
-else (
-	:pingtest1
-	ping -n 1 %server% | find "TTL=" >nul
-	if errorlevel 0 (
+:pingtest1
-		if %numa% == 60 (
+ping -n 2 %server% | find "TTL=" >nul
-			echo Server has shutdown in 60 seconds. & echo Contact the helpdesk.
+if errorlevel 0 (if %numa% == 60 ( echo %server% has not shutdown in 60 seconds. & echo Contact the helpdesk. & pause
-			set /A numa="numa + 1"
+				exit) else (set /A numa="numa + 1" & goto :pingtest1))
-			goto :pingtest1)
+		if errorlevel 1 ( echo Waiting ~60 seconds for %server% & echo to come back online & goto :pingtest2 )
-			else (
-		:pingtest2
+:pingtest2
-		ping -n 1 %server% | find "TTL=" >nul
+ping -n 2 %server% | find "TTL=" >nul
-		if errorlevel 1 (
+if errorlevel 1 (if %numa% == 60 (echo %server% has not come back online & echo in 60 seconds. Contact the helpdesk. & pause
-			if %numb% == 60 (
+				exit) else (set /A numa="numa + 1" & goto :pingtest2)
-			echo Server has not responded after 60 seconds. & echo Please contact the helpdesk.
+if errorlevel 0 (echo %server% is back online &	 pause
-			pause)
+		exit)
-			else (set /A numb="numb + 1"
-			goto :pingtest2)
 </pre>

@@ Line 14: / Line 14: @@
 This is a WIP, has not been tested yet. Just wanted to get it recorded<ref>https://stackoverflow.com/questions/21245545/ping-test-using-bat-file-trouble-with-errorlevel</ref><ref>https://stackoverflow.com/questions/1788473/while-loop-in-batch</ref><ref>https://ss64.com/nt/set.html</ref><ref>https://stackoverflow.com/questions/132799/how-can-you-echo-a-newline-in-batch-files</ref>
 <pre>
+@echo off
 </pre>

← Older revision		Revision as of 19:19, 17 October 2018
Line 10:		Line 10:
	==Script==		==Script==
	Obviously we can not simply tell people what to type into a terminal. Also they would not know if the system was back online or not anyway.		Obviously we can not simply tell people what to type into a terminal. Also they would not know if the system was back online or not anyway.
		+	<br>
		+	<br>
		+	This is a WIP, has not been tested yet. Just wanted to get it recorded<ref>https://stackoverflow.com/questions/21245545/ping-test-using-bat-file-trouble-with-errorlevel</ref><ref>https://stackoverflow.com/questions/1788473/while-loop-in-batch</ref><ref>https://ss64.com/nt/set.html</ref><ref>https://stackoverflow.com/questions/132799/how-can-you-echo-a-newline-in-batch-files</ref>
		+	<pre>
		+
		+	</pre>