Re: Restricting other users
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 05/30/05
- Next message: Knox: "Re: registry hacked under XP limited account"
- Previous message: Joe: "Restricting other users"
- In reply to: Joe: "Restricting other users"
- Next in thread: Joe: "Re: Restricting other users"
- Reply: Joe: "Re: Restricting other users"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 30 May 2005 07:33:53 -0700
You did not mention the operating system, but as you did mention
fast user switching I will guess that you have XP.
You also evidently have the machine set to automatically log in
when it is started, which by the way is very insecure.
If you do not yet have multiple accounts, then as soon as you
use the User Accounts applet of control panel to define more
you will likely start needing to log into the machine upon start,
which instead will present a Welcome screen that looks pretty
much the same as the switch user selection screen.
If your machine does still automatically log in after there are
multiple accounts check in the help system for "automatic logon".
If you had been using the built-in Administrator for login, then
after forcing the Welcome screen to show, this account will not
be one of the available selections. Not to worry. Just press
alt-cntrl-del-del in order to get the older, main login dialog and
there enter the name and password. (note: this works on the
Welcome screen only, not on the switch-user interface.)
There are ways to get the account to be shown permanently on
the Welcome screen if this is the case.
To prevent use without knowing an account, make sure that you
set new passwords that are not simple to guess, and do this on
all accounts. No one will use the machine without having an
account. Now, for XPs that come preinstalled there is one more
thing you should do - set password on the built-in Administrator
account. Much of the time this account has a blank password
on systems shipped from the manufacturer, and most kids know
of this and of how to make use of the fact. To set this password
reboot the machine into safe mode (this is done by pressing F8
durng the boot sequence) and then use normal means to give the
Administrator account a password,
Finally, you should check, if there were already multiple accounts,
that none of them is a member of Administrators unless you want
it to be one. One simple way to do this in all XP editions is to
Start / Run and enter cmd to get a command prompt, and there
enter in the command
net localgroup Administrators
which will list out all accounts in this group.
For more information, the newsgroup
microsoft.public.windowsxp.security_admin
would be a great newsgroup for you to visit.
-- Roger Abell Microsoft MVP (Windows Security) MCSE (W2k3,W2k,Nt4) MCDBA "Joe" <Joe@discussions.microsoft.com> wrote in message news:22159394-BE27-43BD-916D-5D9525949C28@microsoft.com... > Hi, > I am using a home PC and as a father I want to prevent my kids from logging > on to the computer. Now I've tried locking it, but this prevents 'fast-user > switching' and also my bloody kids will reboot the computer in order that > they can log-on and play games! > Is there any way of locking the computer that still allows 'fast user > switching' to be enabled while preventing everyone who is not an > administrator from loggin on? > Thanks
- Next message: Knox: "Re: registry hacked under XP limited account"
- Previous message: Joe: "Restricting other users"
- In reply to: Joe: "Restricting other users"
- Next in thread: Joe: "Re: Restricting other users"
- Reply: Joe: "Re: Restricting other users"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
