Re: Defining User Rights on a local XP computer.

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 07/16/04 

Date: Fri, 16 Jul 2004 18:07:46 +0200

Johnny Lundgren wrote:

> Hello,
>
> At customers site there is one XP Pro computer shared between several users.
> Those users each have a user account.
> My customer wants the following:
>
> When one of the users need to work on the computer, it maybe locked by the previous user. The new user should be able to logout the previous user without knowing the password of that user account.
>
> I suspect I have to use Local Policy to do this. But how ?
Hi

As Shenan wrote, a logout screen saver is maybe the best option:

Winexit.scr in the free Win2k3 Server RK kit (will work on
Win2k and WinXP at least).

Windows Server 2003 Resource Kit Tools
http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en

(The kit will install on WinXP or later and you can copy only
needed files to other computers)

If the users are non-admins on the local computer you must add Set Value and
Create Subkey permissions for the group Everyone on this registry key:
HKEY_Local_Machine\Software\Microsoft\WindowsNT\CurrentVersion

How can I use the WinExit screen saver without granting Admin rights?
http://www.jsifaq.com/SUBC/tip1100/rh1179.htm

Logoff Screen Saver Does Not Function in Windows NT
http://support.microsoft.com/default.aspx?scid=kb;EN-US;156677

Another option is to create a scheduled job on each computer that logs
the user off after a set amount of idle time:

http://groups.google.com/groups?selm=3FB6E343.FB3AE435@hydro.com 

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/community/scriptcenter/default.mspx

Relevant Pages

  • Re: Need to kill a process as Limited User
    ... I can kill the process and the program should still work OK. ... > when my son logs on to his limited user account? ... Most likely you will need to use some kind of RunAs. ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: controlling user time
    ... The powerful feature "User Working Time" allows you to limit working ... Create a Domain user account for each ... > the server and reset everything to their liking before locking your ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.general)
  • Re: stopping service
    ... I do not want to grant the user account ... >> I need to stop a service from a user account. ... >> to switch to an admin account. ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.general)
  • Re: Load program as a service on Win2k3 ?
    ... and what user account it uses if any to run as a service. ... I have overlooked that it is no longer available in Resource Kit ... >>> Arek Iskra ...
    (microsoft.public.windows.server.sbs)
  • Re: list or monitor for deleted a User Account in Active Directory
    ... > Is there a way to list or monitor for deleted a User Account in Active ... One simple way would be to dump the user list to a text file, ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.scripting.wsh)
Quantcast