We help IT Professionals succeed at work.

Network Login Not Secure

Medium Priority
808 Views
Last Modified: 2013-12-29
I am helping someone with her computer. She wants to prevent her kids from using it by forcing  a login with the network login. Unfortunately they can bypass the login by using the escape key. Is there a way to prevent this and force them to log in.

Thanks,
Andrew
Comment
Watch Question

Commented:
See if this helps:


QUOTE

"From now on, whenever someone logs on by pressing Cancel on the logon prompt, or by entering a new user name in the logon screen, the Windows session will be immediately terminated. The other user accounts may be used as usual. "
http://www.security-tips.com/003.htm

UNQUOTE
http://registry.winguides.com/display.php/629/ 



Protector Win Ver 3.0 Deluxe
QUOTE

This little program protects your windows enviroment against unwanted users. When running it does not allow anyone access to windows without a password kind of a secure desktop. It also disables the keys on your keyboard so Ctrl Alt Del won't even work. You can choose to have it automatically start when windows starts also so rebooting the system by switching of the power button won't work. Protector Win now captures a picture of your desktop on loading and plays an alarm if the wrong password has been entered three times.

UNQUOTE
Look for a button labeled "Protector Win"
http://www.home.acenet.net.au/grahampe/


Windows Security Toolkit
QUOTE

Restrict Access to Passwords Settings, Restrict Access to Network Settings, Restrict Access to Display Settings, Restrict Access to Device Manager, Restrict Access to Hardware Profiles , Restrict Access to Virtual Memory Setting, Restrict Access to File System Setting, Restrict Access to Printer Setting, Restrict User from adding Printer, Restrict User from deleting Printer, Hide Printers General and Details Pages, Hide System Settings Control Panel, Restrict Access to Modem Settings, Restrict Access to Regional Settings, Restrict Access to Internet Settings, Restrict Access to Multimedia Settings, Restrict Access to Add/Remove Programs, Restrict Access to Power Management, Hide All items on the desktop, Remove Favorites Folder from the Start Menu, Remove Documents Folder from the Start Menu, Hide the task bar settings from the Start Menu, Remove Find Command from the Start Menu, Restrict changes to enabled Active Desktop, Disable use of Active Desktop Feature, Clear the recent Documents when Windows Exits, Disable Modification of Start Menu, Remove the Run Command from the Start Menu, Remove the Folders from the Start Menu, Remove the Help Option from the Start Menu, Disable File Sharing over the network, Disable Printer Sharing over the network, Hide Shared Passwords With Asterisk, Disable Save Password Option in DUN-NT, Don't display Username on logging in NT, Disable Caching of NT Domain Password, Hide Workgroup Content from Network Neighborhood, Remove Entire Network from Network Neighborhood,Fix DHCP Security Bug in Windows 9x/NT/2000 to stop hackers from accessing your system, Hacker Guard - Disables Hackers from using a modem to access the Internal Network, Disable MS-DOS mode in windows,   Disable use of real mode Dos Applications, Reset the Content Advisor and Ratings Password, Disable Internet Explorer Content and Ratings Advisor, Restrict User from changing Internet Explorer Advanced Settings, Restrict User from Accessing your personal profiles in Internet Explorer, Restrict User from Accessing Information from your Internet Explorer Wallet, Disable ability to run registry editing tools, Disable Windows Password caching ability, Restrict access to event logs in Windows NT and 2000, Disable use of Windows Hot Keys.

UNQUOTE
http://sensor.hypermart.net/winsecure.htm


QUOTE

Fortres 101 is an innovative security agent that resides invisibly between the computer and the user. A computer sentinel, Fortres 101 monitors each action the user makes and determines if that action is legal or not. As a systems administrator for one or one thousand machines, software security is a must. Protecting not only the software and hardware applications, Fortres 101 also protects time and money by preventing damage to files and programs. You will no longer waste time re-imaging, ghosting, or reinstalling software because of accidental or mischievous deletions and errors. Fortres 101 offers you the ability to restrict/block local hard drives and removable floppy disk drives as well as any local file, folder, or application. Install Fortres 101 on your Windows 3.x/95/98 and Windows NT/2000 machines. For users of Windows 3.x, Fortres 101 v2.51d is available.

UNQUOTE
http://www.fortres.com/


QUOTE

Ever caught someone using your computer without your permission, while you were away for 2 sec!?
Heres the program to solve this problem. Its like Windows NTs lock system, but just for Windows 9x/ME instead.
You simply run the program and your system is locked until the correct password is entered. This program is to be used just like you would use a screensaver with a password on, or of course Windows NTs lock system.


UNQUOTE
http://www.sguft.com/default.asp?mode=ProductInfo&ID=2



QUOTE

Khalil Future Software presents you LockIt!
LockIt! is a security tool for Windows platforms.
Small, fast, powerfull and best of all: FREE!!!

UNQUOTE
http://kfsoft.cjb.net 


The Crazy One

Commented:
Andrew,

This is similar to CrazyOnes first two offerings, but also adds some degree of protection:

There is a way to set things up that offers protection against a user hitting Cancel or just typing in a new username at the Windows logon prompt. If all you want to do is protect against unauthorized Windows access, You can do this...

1) Run Regedit.
2) Go to, and open, the
HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Run key.
3) In the right-side pane, right-click, and create a new string value called NoDefLog (it could be another name if you wish).
4) Doubleclick on this new key and enter the string (exactly) rundll.exe user.exe,EXITWINDOWS
5) Close Regedit.

What this does is set up a situation for the Default User, which is what you are if you hit Cancel at logon, where they are immediately exited from Windows. When a new user
is created, by typing in a new username in the logon prompt box at logon, they inherit this key, which will cause them to be exited from windows also.

The only note on this is that if you are actually maintaining a multi-user system (profiles), then you want to remove the above registry key/entry temporarily before
creating the new user.

For added safety I created this vb script:
which you can put on the desktop to try it out. If it works successfully, move the .vbs script to a different folder. open Notepad and copy and paste the following between the lines and save the file as nodeflog.vbs. If you encounter any problem, double-click on the file to merge the contents into the registry and allow you accesss to Windows. You only have a few seconds. Be VERY careful!
============BEGIN CUT=====================
Dim WSHShell
Set WSHShell = WScript.CreateObject("WScript.Shell")

WSHShell.Popup "Delete value HKCU\Software\Microsoft\Windows\CurrentVersion\Run\NoDefLog"
WSHShell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\NoDefLog"

Sub Welcome()
    Dim intDoIt

    intDoIt =  MsgBox(L_Welcome_MsgBox_Message_Text,    _  
                      vbOKCancel + vbInformation,       _
                      L_Welcome_MsgBox_Title_Text )
    If intDoIt = vbCancel Then
        WScript.Quit
    End If
End Sub
================END CUT======================

Other than that, you can hit the Delete or F2 key at startup, enter the BIOS, look for the Security screen and set and supervisor password and set user options to None.

reghakr

Author

Commented:
I was hoping for a simple solution so that when the Mother starts up the computer, a user name and password would be required and that cancel and escape would not be allowed.

Thanks,
Andrew

Commented:
Well the second link in my first comment is about as simple as it is probably going to get. :>)


http://registry.winguides.com/display.php/629/ 
Hello all,
I am Computer101, a moderator from Experts-Exchange and also an expert within this topic area. This question has been open a long time.  What I am going to do is allow feedback from the questioner and experts.  If it is not resolved, I will delete or accept an answer based on the info I have been given, Experts, feel free to offer input.  I will monitor these questions for a period of 5-7 days and come back and evaluate.  I will have another moderator (who is also an expert in this topic area) look at the question also to ensure we do the right thing for this question.

Thank you
Computer101
Community Support Moderator
Comment from CrazyOne accepted as answer.

Thank you
COmputer101
Community Support Moderator

Explore More ContentExplore courses, solutions, and other research materials related to this topic.