How do I determine if a user must logon to a server before they can shutdown the server? (NETIQKB38646)

goal
How do I determine if a user must logon to a server before they can shutdown the server?

fact
VigilEnt Security Agent for Windows 3.x

fact
VigilEnt Security Agent for Windows 4.0

fact
NetIQ Vulnerability Manager Agent for Windows 5.0

fix

There is a check is called 'Shutdown without Logon'. This check determines whether the system will allow ?shutdown without logon.?

Risks

If someone can shut down a computer or send it a remote shutdown command without authentication, they can deny service or even force launching a trojan program.

Remedies

Do not allow ?shutdown without logon.?

Expected Value

• Disallowed (default)
• Allowed

Formerly known as NETIQKB38646