Administrator to lock out user in Remote Desktop
Using SBS 2003 and XP Pro for the users, can an Administrator, while logged in under Remote Desktop, lock out a user? Occasionally I need to perform some duties and don't want to be interrupted until I finish.
lamaslany
Do you mean can you stop a user logging in locally to an XP machine while you are logged in via a remote desktop session?
ASKER
Yes.
Are they local admins on these machines?
ASKER
Yes. Do I need to remove the local admin privileges?
I was thinking more along the lines of removing them from the list of users allowed to log on interactively (I am just trying to think how easy you could make that process as typically it'd require modifying the local machine policy).
To be honest it has been a while since I last worked with XP clients but I think, by default, if they are not administrators they would not be able to log off an existing session. Of course they could still reboot the machine...
To be honest it has been a while since I last worked with XP clients but I think, by default, if they are not administrators they would not be able to log off an existing session. Of course they could still reboot the machine...
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
By right clicking My Computer and going to Manage, and removing the local computer from the Administrators group, it successfully allowed an administrator from being interrupted during a remote desktop session. Thank you!
FYI: The reason I was considering modifying the list of users that were allowed to log on interactively is that it would prevent the user from logging in even if they reboot it. They would quickly realise that rebooting was useless and they would leave a locked machine alone.
Maybe it is just our users that'd ignore warnings about not rebooting a locked machine... :)
Maybe it is just our users that'd ignore warnings about not rebooting a locked machine... :)