7 replies
by alpha-male
You can enter a BIOS password to prevent them from using the system (unless they are willing to open the case, change the jumper and erase the bios password).
This is a reasonably good solution if not infallible.
by lmcdonald
by benwagg
Alpha-Male is right. Just make sure you don't forget your BIOS password. Can be very inconvenient to overcome that sometimes...
What is your operating system? If you have Win95-98 an don't want to enter a BIOS password, your only other option is to take the PC with you, because Win9x is inherently non-securable. Alternatively, you could remove all the cables as a deterrent to intruders when you go home.
Win2k or XP Pro can be secured, but you must have System Administrator access to secure them further than they are by default. Win2k Pro secures each user's My Documents folder, and no one else can access it unless s/he has Administrator privileges.
If you are not an administrator on your network, I don't advise messing with these permissions, and _for sure_ don't try to lock out the Administrator or you will be stirring a pot that you may wish you hadn't...
How to lock down a Win2k system:
Start > Run > MMC
Pull down Console > Add/Remove Snap-In > Add > Group Policy > Add > Local Computer > Finish > Close > OK.
In the Console Root tree-view, expand Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.
In the right-side windows, find "Log on locally". Double-click to open the policy and choose "who" has permission to log on locally.
Again, if you are not a domain administrator I do not recommend dabbling in Group Permissions. If an end-user does this on my network, I will be likely to stomp into his Manager's office, and he may find himself in a meeting with me, the Controller, and the President of the company...
by lmcdonald
by lmcdonald
by lmcdonald
This discussion is closed to new replies.
Trending Community archive posts
Sort by Trending