Re: WinNT/2000 screen saver with password and Logoff?

From: Mark H. Wood (mwood@mhw.ULib.IUPUI.Edu)
Date: 08/19/02 

From: "Mark H. Wood" <mwood@mhw.ULib.IUPUI.Edu>
Date: Mon, 19 Aug 2002 16:54:46 +0000 (UTC)

In comp.os.ms-windows.nt.admin.misc Bruce Chambers <bchambers@nospam.cableone.net> wrote:
> I'm not aware of anyway to grant "unlock" privileges to anyone but
> administrators.

Not what the OP is asking for; he wants "this bozo locked a public
workstation and then went to lunch, so let me close out his session
and use the station" privileges. This would not grant user B any
access to user A's stuff; it properly protects user A's stuff by
logging him off before user B logs on, just as one would expect.

Maybe it would be easier to disallow locking in the first place?
Depending on your NT version, there's a policy that can do that.
Someone will be unhappy no matter what you do, but as you increase the
complexity of the "solution" your head hurts more. The simplest way
to break a lock is to ensure that nobody can take the lock to begin
with. 

-- 
Mark H. Wood, Lead System Programmer   mwood@IUPUI.Edu
MS Windows *is* user-friendly, but only for certain values of "user".

Relevant Pages

  • Re: WinNT/2000 screen saver with password and Logoff?
    ... > administrators. ... and use the station" privileges. ... This would not grant user B any ... to break a lock is to ensure that nobody can take the lock to begin ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: SE_ASSIGNPRIMARYTOKEN_NAME
    ... > that Administrators don't have the privilege by default. ... What does whoami /priv show when you run it from your admin account? ... You can also create a service and grant it all necessary privileges. ...
    (microsoft.public.platformsdk.security)
  • Re: Question about revoking select from PUBLIC
    ... You'll have to revoke SELECT access from PUBLIC and then grant SELECT ... > If I drop the PUBLIC synonyms, nobody except the owner ... cannot REVOKE privileges you did not ...
    (comp.databases.oracle.misc)
  • Re: Question about revoking select from PUBLIC
    ... You'll have to revoke SELECT access from PUBLIC and then grant SELECT ... > If I drop the PUBLIC synonyms, nobody except the owner ... cannot REVOKE privileges you did not ...
    (comp.databases.oracle.misc)
  • Re: getting error on UTL_FILE.FOPEN
    ... When you create a directory, you are automatically granted the READ and WRITE object privileges on the directory, and you can grant these privileges to other users and roles. ... CREATE DIRECTORY is only granted by default to SYS and the DBA role. ... it as a schema owner other than SYS or SYSTEM it will not work. ...
    (comp.databases.oracle.misc)