How are you trying to shut down the server? Using the shutdown script? If so, what command line are you using? Also, did you try not supplying a user id and password to the shutdown script? Securing the JMX Console does not secure the JMX Invoker Service - to do that you have to edit the server/xxx/deploy/jmx-invoker-service.xml file. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068230#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...