SBS Allows Unauthorized Shutdown from Logon Prompt (200863)
The information in this article applies to:
- Microsoft BackOffice Small Business Server 4.0
- Microsoft BackOffice Small Business Server 4.0a
This article was previously published under Q200863 IMPORTANT: This article contains information about modifying the registry. Before you
modify the registry, make sure to back it up and make sure that you understand how to restore
the registry if a problem occurs. For information about how to back up, restore, and edit the
registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows Registry
SYMPTOMS
The Shut Down button on the intial logon prompt is disabled by default on retail Windows NT Server installations. This is to provide additional security by forcing an authorized user to log on locally to the server to be able to perform a shutdown.
In BackOffice Small Business Server (SBS), the Shut Down button is enabled by default, which allows anyone to perform a soft shut down of the server without being validated by the server.
RESOLUTION
To work around this problem, use either of the following methods:
- Method 1
Modify the funtionality through a registry setting.
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may
require you to reinstall your operating system. Microsoft cannot guarantee that you can solve
problems that result from using Registry Editor incorrectly. Use Registry Editor at your own
risk.
- Run Registry Editor (Regedt32.exe).
- From the HKEY_LOCAL_MACHINE subtree, go to the following key:
\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon
- Delete the ShutdownWithoutLogon value.
NOTE: It is incorrectly listed with a
value type of REG_DWORD and should be REG_SZ. - Select the \Winlogon key.
- Add the following value to the key:
Value Name: ShutDownWithoutLogon
Data Type: REG_SZ
String: 0=Disabled;
1=Enabled
- Close the registry.
- Log off for changes to take place.
- Method 2
- Log on locally to the SBS server with a valid account.
- Press CTRL+ALT+DEL to bring up the Windows NT Security dialog box
- Select Lock Workstation.
This locks the server so that only the logged on individual or an Administrator can unlock it. There is no option to Shut Down the server from this logon prompt.
| Modification Type: | Major | Last Reviewed: | 10/3/2003 |
|---|
| Keywords: | kbprb KB200863 |
|---|
|