remote shutdown

Using the command shutdown -i I can remotely shutdown folks on our network. Is there a service that can be disabled that would prevent the use of this shutdown command?

 

Try to behave yourself? (giggle!)

Black Viper is a great place to look stuff like that up.

HTH
Johanna

 

I don't think you should do that, even as a prank is annoying.
Anyway: I don't think it's a matter of service that you can stop, but rather an issue of privileges. There's a setting in the GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment. Inside you have a setting called Force shutdown from a remote system . This setting tells a system which users are allowed to shutdown the machine remotely. By default, the Administrators group's members. On DCs, the Server Operators group too.
You can configure it on the DC, for domain-wide settings, or on the machine itself, for specific settings on a specific machine.

 

Actually I am not the prankster, I am trying to stop one . I know that when remote shutdown starts, you can use the command shutdown -a to abort the remote shutdown.

Which services would that be?

 

# 131
http://www.kellys-korner-xp.com/xp_tweaks.htm

Johanna

 

I am affraid this reg setting will disable ALL shutdown commands on that machine, even from its console (since is a change in the Windows Explorer). So be carefull with that.
RAMDISK:
From what did I checked, the SHUTDOWN command uses the RPC service, thus is irrelevant to close it (since without it, nothing will work).
Have you tried to close it through GPO?