TL;DR
Is there a way to just hide the shutdown/restart/hibernate commands?(not disable)
Unabridged Version
My end goal here is to control logon times and have reliable WOL but there are many windows things getting in my way. I need decent WOL for updates and other tasks outside of work hours and logon times for security purposes.
As you may or may not know logon hours only control kerberos authentication. At least from what I have read. So if a user is logged in and they are outside of their allowed log on hours then nothing happens(smb connections get broken... maybe). Even if you specify "force logoff when logon hours expire" policy nothing happens.
This was my game plan to get around this.
Create security groups that corresponded to expired logon hours times that automatically reboot their system. For example if a user can only be...