Re: Users logging off other users

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 11/18/04 

Date: Thu, 18 Nov 2004 22:25:55 GMT

As long as they are local administrators there will be no technical way to
prevent them to logging off other users. The solution would be to look at
ways to not make them local administrators. Often applications can have
permissions modified for ntfs or the registry to allow users to run non
Windows 2000 compliant applications. Maybe power users would also work for
the user? If there seems to be no way then implement a user policy that
restricts what a user can do. You can implement auditing of account
management and logon events to see exactly what users are doing what if you
need to enforce written user policy. If you do implement written user policy
have each user sign a copy for their files and give them a copy for their
personal possession. --- Steve

"Mike" <Mike@discussions.microsoft.com> wrote in message
news:0A6DB247-0AF5-4C05-BD97-A63E449A460F@microsoft.com...
> Yes they are setup as local admins through the MMC console. This is so
> their
> desktop appears correctly. Is there no way I can deny pupils to logoff
> staff?