Re: HOW DO I IMMEDIATELY FREEZE AN ACCOUNT?

From: Steven L Umbach (n9rou_at_comcast.net)
Date: 08/16/03 

Date: Sat, 16 Aug 2003 01:27:02 GMT

      Unless you have your network configured with cconect ahead of time, it will be
difficult to find out where he is all logged onto. However you could disable his
account and then use shutdown to remotely shut down the computer he is working at
just before he is terminated [called into the office]. Expiring kerberos tickets
would lock out all access in the forest within ten hours by default. I don't
understand how a employee would have physical access to office computers after he is
fired?? I have a friend who works at a large software company and he tells me when
this happens the now exemployee is escorted from the building by security and told to
never come back or face being arrested and prosecuted. --- Steve

"Dorius Bildigdo" <vrising@go.com> wrote in message
news:ffd1aeff.0308151338.8b84851@posting.google.com...
> We are firing someone and 10 minutes before it happens, I need to
> immediately freeze all his account access. DISABLING AN ACCOUNT DOES
> NOT WORK! If he is already logged in, he will have access AFTER his
> account is disabled. I don't understand this. if we have 1000's of
> machines, he could be logged into a machine in some corner office
> somewhere and after he is fired still have access.
>
> i need a way to immediately BAN him from the network in about 10
> minutes. HOW DO I DO THIS?
>
> its a windows 2000 network.

Relevant Pages

  • Re: Mei Chan [MSFT]
    ... > bottom line is that everything works as advertised in safemode which means ... > a password or add a second account. ... Just for kicks you could try setting up the network with Netbeui or ... You could try disabling the Microsft services but be careful, ...
    (microsoft.public.windowsxp.network_web)
  • Re: XP HOME does not work like XP PRO
    ... >>>network (although the other two PC PRSs can see, but not access the PC HOME. ... >>>I have all users and administrators set ut identically on all three machines. ... >server as all my machines are simply plugged into a Netgear ADSL router. ... >BTW is it normal that each machine has an account administrator, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Mei Chan [MSFT]
    ... a password or add a second account. ... Just for kicks you could try setting up the network with Netbeui or ... You could try disabling the Microsft services but be careful, ... >> services tab are by far the most important. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Question on XP network security
    ... I'm not sure whether you meant adding each and every user account to ... that it gives every user full access to all other machines ACROSS the ... network security. ... > Add each user's domain account to the local administrators group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Home Wireless Networking and File Sharing
    ... passwords on all machines. ... You do not need to be logged into the same account ... and Vista:" I have done that on all of the laptops and main PC and called ... network resourse. ...
    (microsoft.public.windowsxp.network_web)