1 computer only 1 account can login.

My computer joined domain, that means some people can login my computer and get data, how can I change only my account can login my computer, another domain account cannot even administrator? I am using windows XP sp3, DC: windows server 2003 RC2 SP2.

Please help me!
Thanks!
Mr_BachAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Bransby-ITCommented:
Mr Back have I read your posting correctly?

Your computer is a member of a domain.
You have your own domain account on the computer and you wish that no one else logs into your computer?

I am almost certain that this is not possable but I will have a good look around.
0
top_rungCommented:
As the Admin, you can use group policy to change the "logon locally" policy.  Make sure not to lock out administrators groups.  I guess for that matter,  you could also use the Deny Logon locally option.


Windows Settings>Security Settings>Local Policies>User Rights Assignment

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
deroodeSystems AdministratorCommented:
Or you could use a tool like Truecrypt to encrypt your harddrive. That way nobody can even startup the computer...

http://www.truecrypt.org/
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

taubcCommented:
Will your bios allow you to setup a password for bootup? If so lock down the machine via the bios and you dont have to worry about who has domain authorization.
0
johnb6767Commented:
Keep in mind, if your Domain Admin sees that he cannot access your PC, you will probably be deffered to HR for violation of the Computer Usage policy (if there is one). You cant block out the Domain Admin. You might also have domain Service Accounts that need access to the PC to get it updated, rollout installs etc....
Just not feasible....
0
top_rungCommented:
GPO is the proper way to do it.  If you are the admin (domain level), then you should have no problems with this method.   If you are not the Domain Admin, then you can use the other options, but as John stated, you run the risk of getting on the Domain Admins/HR bad side.   You will need to check with your IT org if you don't have the priveleges.
0
taubcCommented:
If the data on your machine is that important that you dont trust your domain admin to have rights to see it then you need to encrypt. You also run the risk of losing said data if its not backed up, so you need a strategy there too.

This brings you to a honor system. If the data is private for corporate reasons then logging access is the only way to know who is seeing it.

0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.