Preventing other users from logging on to my PC 1

[TomMonger]

Hello,

My original PC was set up so that no one except an Admin or me could log into my PC (it's on a corporate domain). The IT guy who set that up for me isn't here anymore, and now that I have a new PC, I'd like to be able to do the same. Unfortuantely, the new IT guy doesn't know how to do that.

I can't password protect the BIOS or hard drive because I need to leave the machine on so I can access it from home or other site. I simply want it to reject anyone who attempts to log onto it, like it did with my old machine.

Thanks,
-Tom in Scranton, PA

 

[manhunter2826]

Certainly possible, but either yourself or the Admin person would need to use Server 2003 Group Policy to disallow all users bar you from logging on. Procedurally, very simple to do ...so long as the Admin guy or you has access to Group Policy.

 

[ashpp]

Run -> MMC -> File -> Add/Remove Snap-in -> Add -> Group Policy Object Editor -> Add -> Finish -> OK

Expand to Local Computer Policy -> Computer Configuration -> windows Settings -> Security Settings -> Local Policies -> Log on locally.

Change this to just include you and the administrator.

Depending on the domain setup this policy may be overrided at a higher level. Your IT admin should know about....

 

[TomMonger]

Thank you, ASHPP! That did the trick! Once I saw it, now I remember it! Oh... our group policy settings don't override this setting.

-Tom in Scranton, PA