If you need to shutdown w2k check the moniker string.

WinMgmts:{impersonate,(Debug,!RemoteShutdown)}