• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 716
  • Last Modified:

Deny the ability to unlock a locked workstation.

Hi!  I was wondering if there is a way to deny users the ability to unlock a locked workstation.  I lock my computer when I walk away from it, but the other IT guy here is always unlocking my computer on me.  This is a problem because I have Outlook set to SMS my reminders to me, and when he logs me out, I don't get my reminders.  Is there any way to set my workstation so I am the only one that can unlock it?  Thanks!
0
johnny_cache
Asked:
johnny_cache
  • 3
  • 2
  • 2
  • +4
1 Solution
 
Jay_Jay70Commented:
Hi johnny_cache,

why do you guys have each others password, best advice i could give is create personal accounts that only you have a password too, you cant block someone unlocking a machine as you effectively lock yourself out

Cheers!
0
 
star_trekCommented:
Administrators and the user who locked the computer will have the ability to unlock the computer. Also I looked at the group policy I don't think it can be done.
0
 
star_trekCommented:
The above answer is assuming the IT guy has admin privileges.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
Here2HelpCommented:
Hey.

Take a look at this USB Security Gadget. Maybe something to consider if you want to splash a bit of cash.

http://www.usbgeek.com/prod_detail.php?prod_id=0022

0
 
smartjen4uCommented:
dont worry , try this tweak and read the disclaimer below before trying is tweak

Disable Unlock Windows by Admin password..
computer administrator to unlock Windows session by using Administrator's password.
This is useful when user left workstation and cannot unlock it.
This tweak allows to disable unlocking Windows by Administrator.

Key:  HKEY_LOCAL_MACHINE \ Software \ Rohos  
Value Name:  DisableAdminUnlock  
Data Type:  DWORD  
 1- disable unlocking Windows by Administrator;  

for instructions on how to create a registry key, follow below

Most of mentioned  values (tweaks) should be created manually. Here's how to create value in the registry:

Click "start"
Choose "run" item
In the Run dialog type "regedit" and press OK.
Regedit window (Windows Registry editor) will appear.
Navigate to certain "Key" (HKEY_LOCAL_MACHINE \ ...) using left panel.


and also please read the
Disclaimer:
Modifying the registry can cause serious problems that may require you to reinstall your operating system. Experts Exchange LLC or myself cannot guarantee that problems resulting from modifications to the registry can be solved. Use the information provided at your own risk.

Warning:
Modifying the registry is recommended only for Power users or system administrators.

i wanted to post this disclaimer since my answers should not affect in anyway the company or the user ! if the administrator feels that placing disclaimer is unnecessary then he can remove it at any cost !

0
 
johnny_cacheAuthor Commented:
We don't have each other's passwords, we are both domain admins on the network.  By default we can unlock anyone's computer we want.  I am looking for a way to exclusively lock my computer so I am the only one that can unlock it.  I also looked through Group Policy and didn't see anything, I kinda was hoping I missed it.
0
 
johnny_cacheAuthor Commented:
smartjen4u - that requires a third-party software to work, and I'm trying to avoid installing any software.  Thanks for the suggestion though!
0
 
la_pepe59Commented:
The simpliest way would be to remove the "domain admin" group from the local administrators group on your PC only then add your domain ID as the admin for the machine.  Is there another reason he would need to be admin on your machine other than by default?
0
 
Jay_Jay70Commented:
windows doesnt provide a "prevent one admin from unlocking another admin" rule. thats the way it is, you cant prevent someone unlocking a machine like that from my experience

though saying that if someone else has a solution.......
0
 
MereteCommented:
layman idea here, you could take your keyboard/ mouse. away then they cannot unlock it and it sure sends a message when they wonder where and why you have removed them.
Seeing you dont want to use any software.
there is a few that can lock your keyboard and mouse.
Here is some you can look at
http://www.sharewareconnection.com/titles/lock.htm
Cheers Merete
0
 
johnny_cacheAuthor Commented:
la_pepe59, that worked!  thanks for the tip, the points are yours!
0

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

  • 3
  • 2
  • 2
  • +4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now