Good day,

I have a Windows Server 2008 Standard Service Pack 2.

I want to create a user that will have the minimum rights and will only be able to login in the server and shut it down in case of a power failure, so that it will not continue running on the UPS power.

I searched through the default list of groups to choose which one to make him a member of, but none of them seem to have limited enough rights. Even backup operators can run some applications in the server control panel, accessories, as well as view the Hard disk & partitions, which is something I do not want.

So how do I edit the rights of that specific user?

I searched though here:

Start:

gpedit.msc

Local Group Policy Editor

User Configuration

Administrative templates

System

User Profiles

But I did not find where I could edit that specific user's rights.

Please any help will be highly appreciated.

Thanks in advance

Is there some options for this under AD Users and Computers - Action\Delegate control? I have never used it, but I thought this was for customizing user control beyond the builtin ...

I am pretty green though, so you have been warned