Re: Giving user / group ability to logoff user

From: Steven L Umbach (sumbach55_at_ameritech.net)
Date: 11/06/03


Date: Thu, 06 Nov 2003 17:03:13 GMT

Tell the administrators to logoff and not lock the computer. If this is
happeneing automatically , use the Winexit.scr screensaver from the Resource
Kit that has the ability to log off a user after a period of inactivity
instead of locking. Locking a computer can also be disabled in Group Policy,
but of course a user with domain administrator rights could reverse that
change. A reboot will also allow a user to logon - not the best solution but
can be done if needed. --- Steve

"Chris" <anonymous@discussions.microsoft.com> wrote in message
news:0ce601c3a480$9037a1c0$a501280a@phx.gbl...
> I'm looking for a way give a specific user or group the
> ability to logoff a user on a server. I've set the
> policy to allow shutdown of a machine in our servers OU,
> then gave administrators, domain admins, and our
> operations acct. that ability. This works great as long
> as these select users can log in to the server. If an
> admin has locked the server console however, then the
> operators (whom have no admin privilages)are stuck.
>
> I'd prefer not giving our operations account admin rights
> on the servers. Better I'd rather tweak the reg. or
> something such that they have the ability to force logoff
> of whomever locked the console in the first place.
>
> Thanks



Relevant Pages

  • Re: Windows 2003 - User Logins vs Software
    ... > We have recently installed a Windows 2003 domain server. ... admin, open "Active Directory Users and Computers", locate the workstation ... "Administrators" group under "Local users and Groups". ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Demoting administrator to reader does not work!
    ... Local Administrators on the server also get admin rights ... Microsoft MVP - Sharepoint Portal Server ...
    (microsoft.public.sharepoint.portalserver)
  • Re: User Rights in TS
    ... Administrators have complete and unrestricted access ... Regarding deploying the server without Group Policy active. ... relative to the two programs we have that require admin access. ...
    (microsoft.public.windows.terminal_services)
  • Re: logoff user to connect administrator when 2 users are active
    ... Vera's suggestion for a time limmit (logoff or disconnect if inactive) is ... there will be no idle sessions reset. ... |> MCSE, CCEA, Microsoft MVP - Terminal Server ... |>>|| Administrative sessions are designed for use by Administrators ...
    (microsoft.public.windows.terminal_services)
  • Installing Software and Permissions
    ... etc etc on my TS Server. ... Security group and they'll have TS admin permissions... ... Added TS_Admins to the Local group on the TS Server - Administrators ... member of the TS_Admins group and try and install a piece of software.... ...
    (microsoft.public.windows.terminal_services)