JSI Tip 2010. When you issue a remote shutdown, a domain user can avoid it.

Due to a flaw in the code of Shutdown.exe, a user can avoid a remote shutdown.

When they receive the shutdown notice, they can quickly logoff and logon, defeating the lame code.

You can prevent this by setting the /T parameter to a suitably short time.