Remove Shutdown & Restart from RDP user’s options

The Remote Desktop hosting feature of Windows 10 Pro differs from that of earlier versions of Windows in that, by default, it allows remote users to shut down the machine via the Start menu.  These power-related menu options can be limited to Disconnect and Sign Out via Group Policy:

  1. Run gpedit.msc
  2. User Configuration > Administrative Templates/ Start Menu and Taskbar
  3. Enable the option “Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands”

If a remote user must restart or shut down the computer, they can still do so by sending Ctrl-Alt-End and using the power icon in the lower-right corner (just as in previous versions of Windows.)