Prevent other Domain users from logging in to my WinXP Pro Computer

Posted on 2005-05-01
Medium Priority
Last Modified: 2013-12-04
I have a WIndows XP Proffesional Computer which is connected to a DOMAIN for my company. I want to prevent other users from the domain to log in to my PC excerpt myself. I do understand you could do it from the local machine but I can't figure a way to block other users on my DOMAIN to log in to my machine.

Thank you
Question by:ryanong
LVL 85

Expert Comment

ID: 13907661
Your network admin will do that for you. If he won't, then it's against your company's policy to prevent other people from logging on to other machines, and it consequently would be against EE's policy to help you circumvent it.

Author Comment

ID: 13908327
Thanks oBdA..my company is a small company with around ten computers on our network. We have actually hired some outside contractor to actually set it up for us...we paid them and they've left. Now I am in the accounts section ...but since I have a fair knowledge about computers...my boss decide to let me take charge of the network...Iam still learning new things about computers while looking after the network...Im not that type of computer Guru but an average IT person....so it is my task to prevent people to log in to my computer because of the many confidential accounts documents I keep in there...

So please do help to assist me on how to prevent other domain users from logging in to my machine....

LVL 85

Expert Comment

ID: 13908428
Now, preventing access to confidential files is something completely else. That can/should be done with NTFS permissions.
You should have a home drive on a server that's backed up on a regular basis. Permissions to that drive should be set in such a way that only your account (and the account used for backup!) have access. In that case, it doesn't matter who will logon to "your" computer--he won't be able to access your files.
The same is of course valid if you store files locally; you can set permissions so that only your account can access these files. By default, the "My Documents" folder should already be protected. Storing documents locally involves that you'll have to manually backup your files. In addition, locally stored documents aren't really secure if other people have been assigned local administrative permissions on the machine.
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

LVL 18

Accepted Solution

luv2smile earned 500 total points
ID: 13908452
Change the logon locally policy on your computer

Start- run- type:    gpedit.msc

Then navigate to:

comptuer config- windows settings- security settings- local policies- user rights assignment-

Log on Locally

Remove the domain users and authenticated users group and ADD your domain account here.

NOTE:  If this setting is set via group policy on the server then you won't be able to change it locally
LVL 18

Expert Comment

ID: 13908480
I agree with oBda as far as preventing access to secure files.  Even if someone can log onto your computer, if you have properly setup permissions, then they won't be able to access critical files.  The idea of storing those files on the sever is one that I also agree with.  
LVL 38

Expert Comment

by:Rich Rumble
ID: 13910347
Don't forget the firewall, turn on the xp firewall to prevent them from accessing your harddrive, the logon locally will also prevent them from trying to use remotedesktop, but so will the firewall ;) By default the firewall will block all incoming packets with no exceptions, all out going packets/sessions are allowed.

Featured Post

What Security Threats Are We Predicting for 2018?

Cryptocurrency, IoT botnets, MFA, and more! Hackers are already planning their next big attacks for 2018. Learn what you might face, and how to defend against it with our 2018 security predictions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question