Workaround for Shutdown.exe LUA bug

re: Workaround for Shutdown.exe LUA bug

Jim Hughes — Mon, 16 May 2011 21:47:30 GMT

Thank you for telling me about the "Force shutdown..." user rights assignment. I knew there had to be a simple solution to the "Access Denied" error message, but I read 26 articles before finding this one with the right answer!

re: Workaround for Shutdown.exe LUA bug

Reg Merritt — Mon, 07 Feb 2011 19:20:54 GMT

Thanks for the info. However, in my case after pulling my hair out i finally realised that the server using the user "Administrator" had a different password to the user "Administrator" on the workstations.

re: Workaround for Shutdown.exe LUA bug

pavan — Sat, 21 Aug 2010 03:18:20 GMT

Thank You.

Joe Smith

You know.. making sure that the Simple File Sharing was unchecked allowed me to accomplish the remote shutdown from a different computer on the same LAN. I tried all sorts of other stuff to get the remote shutdown to work with shutdown.exe but in the end all I had to do is uncheck the use Simple File Sharing option in Folder Options\View\Adavnced Settings window.

It worked

re: Workaround for Shutdown.exe LUA bug

Joe Benton — Wed, 26 Aug 2009 15:34:10 GMT

The local policy setting works fine for me. Is there a corresponding Active Directory setting that does the same thing? I have 500 or so computers I need to modify and it would be a shame to have to touch all those computers when I could just make a change in Active Directory that does the same thing.

[Aaron Margosis] Can't you make the same change in the same place in domain policy that you do in local policy?

re: Workaround for Shutdown.exe LUA bug

Clemens Li — Mon, 12 Jan 2009 21:33:21 GMT

I'd like to know how to run shutdown -s on my own computer in a network without any admin rights. It's just when I leave my workplace, I want to double-click an icon not to do it the hard windows way via a couple of strokes.

Any idea?

TIA,

Clemens

re: Workaround for Shutdown.exe LUA bug

kroyce — Mon, 22 Dec 2008 23:19:11 GMT

Here's an odd situation for you. I open a vpn session from home to work. I then remote desktop in to my workstation at work. From the remote desktop session to my workstation I am trying to use a batch file to reboot (or shutdown) my laptop that is also running at work. Both computers are running Windows XP SP3 and I belong to the Administrators group on each one.

I have explicitly granted "Allow logon through Terminal Services" AND "Force shutdown from a remote system" rights to myself, Remote Interactive Logon, Terminal Server User, Network Service, and Interactive. My login credentials come from Active Directory while the other accounts are local.

When I run the batch file via a command line I get the infamous error message:

Error opening Terminal server kroycelt.

Error [5]:Access is denied.

However, if I look at the security event logs it shows I logged in successfully but the laptop does not reboot.

When I remote desktop directly into the laptop I have no problem rebooting it.

I am using the tsshutdn utility in the batch file:

<CODE>

@echo off

echo - Setup Log File date /T -> c:\tsclean.log

echo - New Run >> c:\tsclean.log

echo - Rebooting %msgto% >> c:\tsclean.log

set diagMessage = tsshutdn 0 /server:<my laptop name> /v /reboot >> c:\tsclean.log

diagMessage >> c:\tsclean.log

</CODE>

re: Workaround for Shutdown.exe LUA bug

Dilandau — Thu, 04 Dec 2008 17:01:47 GMT

Instead of using NtRights for granting the Guest account the privilege to access the shutdown, one can simply add Guest account to the Administrators group. That would solve the problem with remote shutdown easily

[Aaron Margosis] You forgot the emoticon to tell people, "Of course I'm joking."

re: Workaround for Shutdown.exe LUA bug

Jeremy Tarpley — Sun, 07 Sep 2008 07:08:59 GMT

Aaron,

I never would have figured that out - thank you!

re: Workaround for Shutdown.exe LUA bug

Alvin — Mon, 14 Apr 2008 02:30:04 GMT

How am I supposed to copy the NtRights.exe program to Windows\system32?

[Aaron Margosis] You need to be running as admin to do that.

re: Workaround for Shutdown.exe LUA bug

Chris — Thu, 13 Mar 2008 19:34:52 GMT

Further to Aaron's comment that Remote Shutdown of a XP Home PC is not possible because connecting remotely uses the rights of the Guest account - this is correct.

What is not correct however is the statement that remote shutdown is not possible. The solution lies in granting the Guest account the privilege to access the shutdown.

To do this you need to use the NtRights.exe file found in the XP Resource Kit, here http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD&displaylang=en You need to download the kit from Microsoft. Copy the NtRights.exe program to Windows\system32. Next log-in as an administrator on the box top be shutdown remotely and perform the following commands from a command window:

NtRights –u Guest +r SeRemoteShutdownPrivilege

NtRights –u Guest +r SeShutdownPrivilege

Be careful about the spelling – note there is no ‘t’ in the priv name where you would expect it to read SetRemoteShutdownPrivilege

See here for a full description of the NtRights.exe program http://support.microsoft.com/kb/279664

Now you should be able to use the shutdown.exe programs from a remote computer. When you do the shutdown message on your XP Home machine will read ‘Shutdown initiated by \\<pc name>Guest’