Hello Ebenezer Teye Narh,
Thank you for posting in Q&A forum.
1.Please check if the users can shut down the machine when the local users sign in the same machine.
If the local user signs in the machine, he/she can shut down the machine, maybe some user policies control the setting. Please check related user policy as below.
For checking User Configurations within gpresult, we can follow steps below.
Logon the machine using normal domain user account (that applies this gpo).
Create a folder named F1 in C drive.
Open CMD (do not run as Administrator).
Type gpresult /h C:\F1\gpo.html and click Enter.
Open gpo.html and check if there are these gpo settings under "User Details".
If both local user and domain user can not shut down the machine with the same error message, maybe the computer policies control the setting, then please check point 2.
2.On one test problematic machine, if you remove the machine from domain to workgroup, please check if the user can shut down the machine.
If the user can shut down the machine after the machine removed from the domain, you can check the related computer policy as below.
For checking Computer Configuration within gpresult, we can follow steps below.
Logon this machine using administrator account.
Open CMD (run as Administrator).
Type gpresult /h C:\gpo.html and click Enter.
Open gpo.html and check gpo setting under "Computer Details".
I hope the information above is helpful.
If you have any questions or concerns, please feel free to let us know.
Best Regards,
Daisy Zhou
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.