Domain users cannot restart/shutdown the client PC

To Edit the Group Policy in a Domain

1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point toPrograms, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In the console, right-click your domain, and then click Properties.
3. Click the Group Policy tab.
4. In the Group Policy Object Links box, click the group policy for which you want to apply this setting. Click Default Domain Policy.
5. Click Edit.
6. Expand Computer Configuration, expand Windows Settings, expand Security Settings, expand Local Policies, and then click Security Options.
7. In the right pane, double-click Allow to shutdown the system.
8. Click Add User or Group, and then type User or Group then click OK.
9. Close the Group Policy editor, and then click OK.