Failed to issued a group policy to disable the shutdown and restart option on shutdown menu

Publication Date:  2015-03-10 Views:  447 Downloads:  0
Issue Description
System version: SingleCloud Solution V1R2C01SPC300
Desktop Group type: Shared
AD user group: DomainGuest

The customer is university, all the student can use any VM in the shared DG, if the VM has been shuted down, then the user can't start the VM from the WI, if all the VM are shuted down, then the student can't use the VM anymore, because the VM can't be start from WI.
so the IT administrator make a Group Policy in AD to disable the shutdown and restart option on shutdown menu of the user VM, but when he executed the command "gpupdate /force", it failed.
Alarm Information
Updating Policy...

User policy could not be updated successfully.
Handling Process
Login the master and slave AD server, open local computer policy,modify the policy  "Deny access to this computer from network", remove the restriction on guests;

Then execut the command "gpupdate /force" again;

Logout the user VM from WI and login again, the problem resolved. 

Root Cause
When we do the Security Hardening, there is a AD policy setting "Deny access to this computer from network", it's applyed to guests.

And the domain users of the VMs are in this group "DomainGuest".

So this security policy will deny the  "gpupdate /force" command for the user VM.

END