A technician needs to remove the ability of standard users to shut down or restart a shared computer. Which of the following commands can be used to accomplish this task?

services.msc opens the Services management console, which is used to start, stop, and configure Windows services - it has no capability to restrict user shutdown permissions.

shutdown.exe is a command-line tool used to execute or schedule shutdowns and restarts, not to configure or restrict user permissions for those actions.

bootrec.exe is a Windows Recovery Environment tool used to repair the Master Boot Record and Boot Configuration Data, unrelated to user permissions or shutdown restrictions.

The Local Group Policy Editor (gpedit.msc) provides granular control over user rights assignments, including the 'Shut down the system' policy found under Computer Configuration - Windows Settings - Security Settings - Local Policies - User Rights Assignment. By removing standard users from this policy, a technician can prevent non-administrators from initiating a shutdown or restart. This is the correct administrative tool for enforcing access controls over system-level functions.