Re: Deny administrator local login

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

we use a windows xp with a imaggesseter conected trought a scsi card. We
need admin privileges to magane it. But we are using the domain
administrator account... So only 3 people here knows its password. But now
will work here a lot of people and they must operate the imaggesseter
remotally. I don`t want these new people know the master password from my
domain. So I will create a simple account and give to it local administrator
privileges only in that machine. And everyone will know only this password.
I just need to "deny logon locally" to administrator account just to force
my olders users don`t use its password anymore in that machine.



THANKS!


"Miha Pihler [MVP]" <mihap-news@xxxxxxxxxxx> escreveu na mensagem
news:O70AOcIGGHA.1192@xxxxxxxxxxxxxxxxxxxxxxx
> Yes it is possible. Edit policy and put Administrator account in "Deny
> logon locally".
>
> Deny logon locally
> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/537.mspx
>
> Note: be very careful what you do, because you _can_ lock yourself out.
>
> Also note that administrator can bypass this policy if he/she really want.
>
> My question: why would you want to implement such policy? What is your
> reason behind this?
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "TZanolo" <zanolo2@xxxxxxxxxxx> wrote in message
> news:u6PUUUIGGHA.1552@xxxxxxxxxxxxxxxxxxxxxxx
>>I want that the administrator can't login locally on a windows xp
>>professional workstation. My server is win2k with domain. Is there a way?
>>
>
>


.

Relevant Pages

  • Re: IBM says AMD dead in 5yrs ... -- Microsoft Monopoly vs. IBM monopoly
    ... those virii are not relying on anything inherent in Windows. ... >>administrator failing to put a password on the administrator account for ... >>Outlook Express, a Web browser other than Internet Explorer, and using a ...
    (comp.os.vms)
  • Re: Administrator account logon
    ... MS-MVP Windows XP/ Windows Smart Display ... >>the Administrator account on the new Windows XP logon ... >>for Enable Administrator Account ... MS-MVP Windows XP/ Windows Smart Display ...
    (microsoft.public.windowsxp.security_admin)
  • Re: msconfig problem
    ... Operating system is Windows XP Home Edition Version 2002 with SP2. ... Administrator to make the return to Normal Startup. ... Event Type: Warning ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Password Protected Screen Saver and Administrative Password
    ... the console is routinely locked by administrator ... is to give them a local administrator account, ... There are versions of winexit.scr available for windows 2000 and 2003 ... > release a server password protected screen-saver ...
    (Focus-Microsoft)
  • [Full-Disclosure] Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows l
    ... Windows XP home edition hides the administrator account and disables access ... Subject: Vulnerability in IBM Windows XP: default hidden Administrator ... > In previous versions of Windows, the install would allow you to ...
    (Full-Disclosure)