Windows Forum

Ask something
Discussion Locked

An specified user can unlock a Windows 2

0 helpful
7 replies

by litus

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

When a Windows 2000 user lock a PC, is there a solution for unlock It without to be Administrator or the user that has locked the PC?
I want that user "A" have privileges for unlock the PC that have locked user "B", but I prefere that user "A" havenot Administrative rights.

Thanks a lot

7 replies

by shmaltz

This is imposible, as only someone of the admin group can do it. What you could however do is setup a group policy that logs off the user automaticly after the logon hours expired. That way no one will have to unlock the computer when the logon hours expired. This however doesn't help you if the second user may arrive before the logon hours of the first user expired. Another option would be (this of course if the second user should just not have Domain wide admin rights but you don't care if s/he has local admin rights) to make that user (or someone thats always available) a member of the local admin group.

by litus

I tried to made the user a local Administrator but It does not work. The PC where I need that is a domain server (Windows 2000). Are you sure that a local Administrator can unlock the PC If the computer is locked by a Domain Administrator?

by cavedweller

You can always prevent users from running a screen saver with a security policy. Couple this with an administrative policy that users must log off bwfore walking away. This type of policy is good for public-access or shared machines but very inconvenient for personal machines in offices.

by litus

The Windows 2000 computer is not blocked by a screen saver. Where can I implement a policy for user must log off? I post another question about this... I want that an user can not to logon a new client without logoff previously, and not to logon 2 sessions simultaneously.

by shmaltz

Why didn't you metion that it is a domian controller. There is no such thing as a local admin on a domain contorller.
Use the delegate control option in Active Directory.

This discussion is closed to new replies.