Restricting access to XP Pro Workstations

[nellerbug]

I have a number of XP Pro PC's in my Network that I want to restrict access to. When these computers power up, the Logon Screen is for my Windows 2000 Server, not the local PC.
The problem is, any User from my Network can enter their W2K Domain name and password, and the XP creates account for them.

Is there any way I can prevent this?

 

[beerhunter2]

You could enter a user boot up password in CMOS. Then only let authorized users know what that password is.

Help! I've fallen and I can't reach my beer.

 

[nellerbug]

Given the number of people using these computers, I would rather not introduce another password. Is there not a policy I can set to prevent accounts being created on these computers by my W2K Domain Users.

 

[acl03]

Are you in a Windows 2000 domain? If so, all domain users, by default, can login to a workstation. There are no accounts created by windows XP, as the domain is authenticating them.

If your users are logging into a domain:

You can use local group policy to restrict who can logon to any particular workstation.

On any particular user workstation:

Start->run, type gpedit.msc

Browse to:
Computer Configuration->Windows Settings->
Security Settings->Local Polities->User Rights Assignment

In the right pane, you will see "Log on Locally"

Double click this and you can edit who is allowed to log onto the machine locally.

You'll probably want to at least leave administrators.

 

[kamonster]

Hello, I have a similiar issue. Except I am trying to set up the Power-On Password on a Windows XP system. I go into the Setup Utility (F10), but when I set up the Power-On Password it doesn't take affect. On the old Windows 98 computer the required password screen would pop up as soon as you power on the machine, however, this time it only required the password when you pressed F10 (i thought this was the setup password.)
If you have any advice, I would appreciate it.
Thank you,
Katy

 

[bcastner]

The power-on password is a BIOS feature, and not related to your installed OS version.
Call tech support at the computer manufacturer.

 

[kamonster]

Sorry it took so long to respond. We ended up going with the BIOS power-on password and found that what was happening is that in WXP you have to tell it to require the password when you "restart" as opposed to shutting down all the way. It is resolved. thank you for you assistance.
Katy