Shutdown PC via Remote Desktop

[Jonathan]

I sent an email to support, but these boards seem like a better place to address this issue...

====================================
Hello,

I'm interesting in buying Dekart login for smartkey/token login... It does almost everything I need except one important thing:

Anyone can use Microsoft Remote Desktop Connection to connect to my computer and shut off my computer from the login screen! Is there a way to disable the shutdown for remote terminal logins or for logins in general? Dekart really should follow the security policy in windows on this matter...

Thank you very much. I hope to buy your product when this is resolved.

[Alex Railean]

Jonathan, the system will indeed work this way, but the shutdown setting can be disabled.

There is no such option in Logon's interface, because it is a standard Windows thing. This was discussed earlier (I'll look for that info and post it here).


Either way, we know that this is not very convenient, because not everyone knows how to play with the registry or with group policies, so the next release of the program will offer such a feature.

[Alex Railean]

This is how you do that:

start the group policy editor (start\run\gpedit.msc)
Go to Computer configuration\Windows settings\Security settings\Local policies\Security options
Scroll down and find the following policy "Shutdown: allow the system to be shut down without having to log on"
Set that to Disabled.


Like I wrote earlier, this is a standard Windows option, so we didn't offer it a higher priority - it's there already. But the next releases of Logon will make it easier to handle this.

[Jonathan]

Actually... on second thought... It would be best if Dekart Logon works like the regular GINA/Microsoft Login procedures - it allows users to shut down from the console, but disables the shutdown button (even if the group policy is enabled) from remote desktop connection. The reason I have concern for this is that I use remote desktop connection to terminal into my computer from the internet. Someone shutting down my computer from the internet without any authentication is very annoying at least. :)