Re: Unlock workstation without closing session

From: Seeker (anonymous_at_discussions.microsoft.com)
Date: 04/13/04


Date: Tue, 13 Apr 2004 16:03:41 -0500

There is the larger philosophical question; should the Administrator be
omnipotent and have 'total control' over any machine in his domain?

The current mechanism provides some protection to the user's data; if the
administrator could simply log in as the user then there would be no
privacy. It all depends on how you view the rights of individuals in your
work place. Where I work, we need to have the IS security team's permission
to look at confidential/personal data, and good cause must exist to allow
that. So if someone unlocks a 3rd party's machine, they better be able to
explain it!

On a more practical level, as a Domain Admin you should be able to connect
to the machine remotely and perform any maintenance that you may need to do.
Consider tools like SMS, ZenWorks or LanDesk, or good old Windows batch
files if the office is too small to justify an enterprise tool.

The bottom line is you may not impersonate as a user; you can kick him out
but unless you had his password, you couldn't log in as him. I would never
give my password to anyone, but that's just me.

<anonymous@discussions.microsoft.com> wrote in message
news:194ae01c42199$1fc53fb0$a601280a@phx.gbl...
> ideally, as an admin, you would have the password to the
> account so you can unlock it.
>
> >-----Original Message-----
> >Unlock workstation without closing session
> >
> >For WinNT, Win2000, and WinXP, when a workstation is
> locked, nobody
> >but the person who locked that station (not even an
> admin) can
> >unlock the station. When an administator tries to unlock
> the station,
> >the session will close immediately shutting down all the
> applications
> >that are currently running on the system. This often
> poses a problem
> >for us. We often see yellow stickies asking people not
> to touch the
> >system. Shutting down someones system is simply not an
> option.
> >
> >This does not make any sense to me! This, in effect
> gives a regular
> >user more power than an administrator who should have
> absolute control
> >over the system.
> >
> >Ideally, as an administrator, I would like to be able to
> truely unlock the
> >system. That is, unlock the system without closing the
> session.
> >
> >Anyone know how or even if this is possible?
> >
> >Sue
> >
> >
> >.
> >



Relevant Pages

  • Re: Permissions to unlock Administrator account?
    ... you cannot lockout the administrator account...it will unlock automatically as soon as you enter the correct pwd ... leaving only the Administrator account there (I believe ... and unlock user accounts to our accounts so we could still use AD Users and ... Computers for daily admin tasks. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Dang! Now how do I remove her wallpaper?
    ... "Not configured" will simply leave the corresponding registry at whatever it ... > I can log in as me (an administrator) on her computer, use GPEDIT.MSC> to unlock the desktop, then log in as her, and it's still locked. ... Obviously, it's only on her desktop, so she> needs to be logged in to remove it, and she can't log in without the> policy locking it again. ...
    (microsoft.public.win2000.networking)
  • Re: users locking eachother out
    ... A user must be an administrator to unlock a workstation. ... Windows Server MVP ... > One complaint is that some users leave their computers for good while ...
    (microsoft.public.windows.group_policy)
  • Re: locked computer
    ... > Please note that it will log off that user, it will not unlock the screen ... >> We have a DNSAdmins group with explicit group rights. ... >> When an administrator locks the computer, ...
    (microsoft.public.win2000.security)
  • Re: Unlock Computer?
    ... The Administrator can unlock it. ... If you have never entered an Administrator password just use Administrator as the user name and leave the password field blank. ... > and clicked (Lock Computer). ... > when I try to unlock says Rick then Password I click ok and still is locked. ...
    (microsoft.public.win2000.general)