Disabling logon

From: Alan D. (somedude_at_somedomain.com)
Date: 11/22/04 

Date: Mon, 22 Nov 2004 13:47:46 -0800

A better way to keep someone from logging on with the account might be the
following:

Start / Control Panel / Administrative Tools / Local Security Policy

Security Settings / Local Policies / User Rights Assignment / Deny Logon
Locally

Modify that value (Deny Logon Locally) to include the user you have just
created.

I believe in Windows 2000 "Local Security Policy" may be referred to as
"Group Policy" but I'm not sure. I ran windows 2000 very briefly before
switching to XP.

"mmac" <no@thank.you> wrote in message
news:eFRI8TrzEHA.2012@TK2MSFTNGP15.phx.gbl...
>I got the following in response to a similar problem, hope it helps.
>
> 1. Click Start / Control Panel / User Accounts / Create a New Account /
> Name the Account: "able2play" (without quotes) / Next Pick: "Computer-
> Administrator" & Click "Create Account";
>
> 2. Click on your new able2run account and Create a Password for it;
>
> 3. When your limited user wants to run a program that requires
> Administrator
> privileges they can Right-Click the shortcut to that program / Click
> Run As... /
> "The Following User": able2run and enter the password. Simple as that!
>
> I know what you're thinking: That defeats the purpose of the limited user
> account.
> To secure the "able2run" account so that it can't be used to logon to the
> computer:
>
> First you can hide the account so that it won't show up on the Welcome
> Screen:
> http://www.dougknox.com/xp/scripts_desc/xp_hide_users.htm (thanks Doug!)
>
> Next add a shortcut to the windows logoff routine into the RUN key of the
> able2run registry.
> This is a one shot attempt that must be done from within the account.
> Once done you can't gain access to the account again so get it right the
> first time
>
> 4. Logon to the "able2run" account,
>
> 5. Click Start / Run / regedt32 / browse to:
> [HKCU\SOFTWARE\ Microsoft\Windows\CurrentVersion\Run] and
> Click Edit / New / String value / ValueName: logoff / Value data:
> logoff
>
> From now on, if anyone logs on with the "able2run" account, the computer
> will log
> them off immediately. They will not gain access to an administrators
> desktop! :-)
>
> "Hernán Castelo" <bajopalabra@hotmail.com> wrote in message
> news:u48577ozEHA.2636@TK2MSFTNGP11.phx.gbl...
>> hi
>> i need to set up an account
>> just for execute an .exe vía "RunAs" command
>> but preventing to start windows
>> with that account on the network
>>
>> its possible ?
>>
>> --
>> atte,
>> Hernán Castelo
>> SGA - UTN - FRBA
>>
>>
>
>

Relevant Pages