A simple yet powerful GPO setting that is quite common to see in corporate environments is the removal of the Shut down and Restart functionality of Windows computers. This can be a critical thing inside an RDS or VDI environment, as you certainly wouldn't want users to have access to shut down a server that is hosting multiple people. Additionally, employees might be used to shutting down their home computers at night, but most companies roll out patches and updates overnight and so typically want their workstations to be turned on during those nights. If you had users shutting down their computers every night, their updates wouldn't install until the daytime hours and could interfere with their work.
In any case, let's check out the policy setting that can be used to restrict my user account from having access to the Shut down options inside the Start Menu. Create a new GPO, link it accordingly, and edit that GPO with the following setting:
User Configuration | Policies | Administrative Templates | Start Menu and Taskbar
Inside this location, the setting we are going to enable is called Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands.
Once enabled and applied to a user account, the power functions will be disabled inside the Start Menu. I assigned this GPO to the OU where my user accounts are currently sitting, and logging into LAPTOP1 as my Jordan user now proves this to be true. When I open the Start Menu and click on the little power icon, all I can see is a friendly message stating that There are currently no power options available:
