Allow standard users to RPC reboot server

From Michael's Information Zone
Jump to navigation Jump to search

Purpose

I have a server that I like to pretend does not exist (like I do with most of my Windows servers). This system is dedicated to one department, so it makes sense to allow them the ability to reboot the server.

Permissions

Going into this I assume standard users can not use RPC shutdown. So in this case we need to allow them to reboot without being able to break anything.
[1]

  • Open secpol.msc
  • Navigate to Local Policies -> User Rights Assignment -> Force shutdown from a remote system
  • Add the user or group you want to allow remote shutdown rights to.

Script

Obviously we can not simply tell people what to type into a terminal. Also they would not know if the system was back online or not anyway.

This is a WIP, has not been tested yet. Just wanted to get it recorded[2][3][4][5]
  1. ↑ https://superuser.com/questions/332548/how-can-i-allow-non-administrators-to-use-shutdown-exe
  2. ↑ https://stackoverflow.com/questions/21245545/ping-test-using-bat-file-trouble-with-errorlevel
  3. ↑ https://stackoverflow.com/questions/1788473/while-loop-in-batch
  4. ↑ https://ss64.com/nt/set.html
  5. ↑ https://stackoverflow.com/questions/132799/how-can-you-echo-a-newline-in-batch-files
Retrieved from "https://wiki.1701technology.com/index.php?title=Allow_standard_users_to_RPC_reboot_server&oldid=969"