A. In the FAQ "How can I remove the Shut Down button from the login screen?" at the URL below, I explain how to set a registry subkey to display or remove the Shut Down button from the logon screen. You can also use Group Policy to configure the logon screen on a local computer by performing the following steps:

  1. To start Group Policy Editor (GPE), go to the command prompt and type gpedit.msc
  2. Expand Computer Configuration, Windows Settings, Security Settings, Local Policies, and select Security Options.
  3. Double-click "Shutdown: Allow system to be shut down without having to log on," configure this setting to either Enabled or Disabled as required, and click OK.

    Click here to view image
  4. Exit GPE.

To configure the setting in Step 3 as a domain Group Policy Object (GPO), perform the following steps:

  1. Start the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in (go to Start, Programs, Administrative Tools, Active Directory Users and Computers).
  2. Right-click the container that holds the GPO you want to modify (e.g., a domain, organizational unit--OU), select Properties, select the Group Policy tab, select the actual policy, and click Edit.
  3. Double-click "Shutdown: Allow system to be shut down without having to log on," configure this setting to either Enabled or Disabled as required, and click OK.
  4. Exit MMC.