IT Employment

Ask something
Discussion Locked

Preventing Multiple users from logging on to my personal workstation....

0 helpful
15 replies

by sysadmintech

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi Everyone!

...Ok here's the problem Im a Win 2000 Pro network admin working on the 2nd shift support team... I have recently setup my own personal workstation OS Win 2000 pro in my own personal area. However when I arrive to my workstation on my shift I always seem to find someone sitting at my workstation.... Yes Im fed up with this smelly ass sitting at my workstation sorry but its the truth.... How can I prevent multiple users from logging on to my PC?

P.S I dont want to start setting restriction on user accounts. All I want to do is restrict multiple users from logging on to my PC.

Thanks for your help!

15 replies

by zlitocook

You did not say if it is an XP box but you can set it like it's a home edition. It is alot simpler this way then using the registry.

by andeanderson

You are asking how to stop multiple users without having any restrictions. That's not possible. To stop others you must have restrictions.

The only way you can stop other users from using your workstation, if you have the admin rights and authorization to do so, is to set up restricted access through the Users function. Remember, that workstation belongs to the company and is not your personal computer.

Set-up the administrator and your account with passwords. Then disable the Guest account and require users to hit Ctrl-Alt-Del keys to login.

That will prevent others from using your workstation.

by sysadmintech

I do have my entire network password protected Newbie. All I need to know is there a way that I can restrict users with accounts from logging on to my local machine. VIA using group policy or something in that nature. Im pretty sure if I thought of this so did Microsoft. Its just knowing where and how to set this restriction.

by utherpendragon

Something to try, though im not overly sure of this!!

You can setup your machine to have an OU of its own, and then block the default domain policy, setup your own group policy to only allow your user account to log on to that machine

In theory that should work, but i have never tried it!!

Hope this helps

by briandesu

I personally like idea presented in "Rough Idea". I offer an alternative.

Make your PC a standalone PC, that way only local users may logon to it.

So, how do you administer the network, create a trust...? Or use remote desktop connection?

Regards,

briandesu

by pvisnicky

Hey SysAdminTech
Use a script to keep unwanted people out of your computer.
Copy the script below into notepad and save it as shutdown.vbs.
Change where it says "your user name" to the logon name that you use. and then stick the script in the start up folder.
This script is set to just log them off.
If you set ObjOperatingSystem.Win32Shutdown(1)
as 1 it shuts the computer off.
Carefull you don't lock yourself out.

'Shutdown.vbs
Set x = CreateObject ("Wscript.Network")
'Wscript.echo x.UserName

If x.UserName = "Your User Name" then
Wscript.echo "You May Use this Computer"
Else

Set colOperatingSystems = GetObject("winmgmts:" _
& "{(Shutdown)}").ExecQuery("Select * from " _
& "Win32_OperatingSystem")
For Each objOperatingSystem in colOperatingSystems
ObjOperatingSystem.Win32Shutdown(0)
Next

'BTW, you can change the 0 to these numbers if you want to shutdown or other
'functions
Wscript.echo "You are NOT PERMITTED TO USE THIS COMPUTER"
'0 preform logoff
'1 shutdown
'4 forced shutdown (don't allow to save)
'8 powers down the machine

End IF

by shay1271

Go to Administrative Tools, Local Security Settings, Under security settings go to local policy, find the settings that say "Deny logon locally" and "Log on locally". Choose the network/computer user names you want respectively.

Make sure you have administrative rights and don't lock yourself out.

by sysadmintech

I dont believe that no one was able to answer my question with a logical solution underneath there nose.

Any way here's the answer. In the bios menu all you have to do is set the bios to password protection. As soon as the user turns on the pc it will prompt him or her for a password before executing the operating system. Stick around you might learn something.

I tip my hat for those of you that tried to answer my question

Thanks

by clasky

The system can be opened by a motivated user and the bios info can be reset very easily.

by johnk39245

Don't want anyone to use this computer? set the password in the bios! no password, no going anywhere, unless... cracking out the case to reset it :).

by samthedon

Dear,

If u don't want to mount restrictions in user accounts,it's ok,that is also not necessary.Just restrict the local group policy from gpedit.msc file.specify the users in the list & disallow them,if that is a domain env,then these work fine .If at al these don't work try lusrmgr.msc file.It is always beneficial for the network admin to restrict access..........

get back in case of clarification...

contact me at samar.w@gmail.com
sam1234@rediffmail.com

This discussion is closed to new replies.