I found that using the "shutdown" utility (NT4, 2K must have an equivalent)
from a remote box (perhaps one in the data center) works great, but make
sure you either use the proper switch to blow through any application that
may be hanging, or edit you registry(ies) to do so on shutdown (search MS
KB). If the machine is beyond responding to this utility, a cold boot is
usually the only option anyway. I would never give a data center tech a
login names/passwd out of principle, those guys are goons... (just kidding).

jared

-----Original Message-----
From: Bill Mote [mailto:bill.motebigfoot.com]
Sent: Monday, April 29, 2002 1:32 PM
To: focus-mssecurityfocus.com
Subject: Account Permissions

Background: We have our equipment hosted remotely in a data center.

Question: What is the minimum account privileges/permissions/policies I can
give to allow a data center technician to login and reboot my Windows 2000
server? If possible I'd even restrict them to 'reboot' vs. 'shutdown', but
that'd be gravy.

The current alternative is to have the data center technician hard power the
box. That works but it sure isn't graceful =)

TIA,

bm

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]