SBS Allows Unauthorized Shutdown from Logon Prompt

RESOLUTION

• Method 1
  
  Modify the funtionality through a registry setting.
  
  WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
  
  
  1. Run Registry Editor (Regedt32.exe).
  2. From the HKEY_LOCAL_MACHINE subtree, go to the following key:

     \SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon

  3. Delete the ShutdownWithoutLogon value.
     
     NOTE: It is incorrectly listed with a value type of REG_DWORD and should be REG_SZ.
  4. Select the \Winlogon key.
  5. Add the following value to the key:

     Value Name: ShutDownWithoutLogon
     Data Type: REG_SZ
     String: 0=Disabled; 1=Enabled

  6. Close the registry.
  7. Log off for changes to take place.
     
• Method 2
  
  
  1. Log on locally to the SBS server with a valid account.
  2. Press CTRL+ALT+DEL to bring up the Windows NT Security dialog box
  3. Select Lock Workstation.
  
  
  This locks the server so that only the logged on individual or an Administrator can unlock it. There is no option to Shut Down the server from this logon prompt.