If you are using roaming profiles and a user does not have write permission to their registry file the group policy will not apply. I suggest using local policies to restrict who can and cannot restart a server. Abraham -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Boyd Adolfsson Sent: Tuesday, July 20, 2004 11:20 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: W2K TS sudden restart I hope there is not a new virus that may do this. We have been very well protected so far what with the various firewalls, devices and software packages we use. I am really considering Ryan's suggestion of a user inadvertently restarting. How they got permission I can't think. Plus I use GP to hide all shutdown and restart items. What if GP wasn't being applied to a computer or a user? Any way to find out if this was the case? Boyd -----Original Message----- From: Leone, Michael [mailto:MLeone@xxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, July 20, 2004 2:13 PM To: 'thin@xxxxxxxxxxxxx' Subject: [THIN] Re: W2K TS sudden restart Spyware? Virus of some sort? -- ------------------------------------------------------------ Michael Leone, Systems Administrator Philadelphia Contributionship 210 S. 4th Street, Philadelphia, PA 19106 < mailto:mleone@xxxxxxxxxxxxxxxxxxxx> V: 215-627-1752 x1282 F: 215-627-5354 -----Original Message----- From: Boyd Adolfsson [mailto:badolfsson@xxxxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, July 20, 2004 2:03 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] W2K TS sudden restart Has anyone ever run into a problem where a W2k SP4 Terminal Server suddenly restarted on its own, logging off all users and restarting? This just happened to us today. I couldn't find anything suspicious in the event log. Boyd Adolfsson Director of Technology, MCSE+I SeniorBridge Family Companies, Inc. (212) 994-6147 Fax: (212) 994-4260 http://www.seniorbridgefamily.com This message is only for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by phone.