Re: Logging off another user policy

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

On 3 Aug 2005 13:38:11 -0700, "BrianChernicoff"
<BrianChernicoff@xxxxxxxxx> wrote:

>Martin-
>
>You mentioned that when a user forgets to logoff that the machine
>becomes locked. The only way to unlock is to either know the local
>admin password or to know the users password. I'm not sure what you
>mean by granual rights to log off users.
>
>I have a recommendation but it all depends on the security of your
>office. I would shut off screensavers and power management for this
>workstation. If a user forgets to logoff the workstation should remain
>logged in with the desktop showing. Of course this means that the pc
>will be open to anybody who walks by. Since five people work on this 1
>workstation can I make the assumption that security isn't a huge deal?
>
>Also, what kind of OS are we talking about?

Actually security is a huge deal. This workstation is attached to a
high output scanner via a scsi adaptor. Unfortunatlly the scanner can
only be controlled by this single PC and not by the 5 users individual
work stations. It is used for scanning medical information. By Group
policy every PC is locked after 10 mniutes of no keyboard or mouse
movement. The 5 people working on the scanner are working in shifts.

I realise to unlock the PC you need to know the persons password who
has the PC locked (Not an option) Or have a user name and password of
an account that is a member of the local administrators group. Again
this is not an option as we are concerned what the users could do
willingly or unwillingly with an admin account. My question is, is the
right of a member of the local administrators to unlock a locked PC
only for local administrators or can that right be assigned through
group policy to a regular user.
.

Relevant Pages

  • Re: Allow regular user to unlock screensaver locked computer
    ... Only local administrators have that right. ... workstation to see if anything fits your requirements. ... Allow regular user to unlock screensaver locked computer ...
    (Focus-Microsoft)
  • Unlocking Workstations
    ... running a pure Windows 2000 Server/Workstation environment with active ... workstation locks after 15 minutes of inactivity. ... or an administrator can unlock the workstation. ... networked workstations is a Domain Administrator. ...
    (microsoft.public.win2000.security)
  • Re: Unlocking Workstations
    ... I'm> running a pure Windows 2000 Server/Workstation environment with active ... I have a policy enabled that makes it so that the> workstation locks after 15 minutes of inactivity. ... only the user> or an administrator can unlock the workstation. ... I had thought about> creating an account called "unlock" that users could use to unlock other> workstations, but there is no way I can have a generic domain administrator> account on my system. ...
    (microsoft.public.win2000.security)
  • Re: Unlocking Locked workstations
    ... > workstation, without granting them local admin permissions on the ... Pretty much the policy would be worthless if anyone could unlock the ... some industrious and impatient student decides to reboot the PC, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Unlocking Locked workstations
    ... > workstation, without granting them local admin permissions on the ... Pretty much the policy would be worthless if anyone could unlock the ... some industrious and impatient student decides to reboot the PC, ...
    (microsoft.public.windowsxp.basics)