I work in a college and we have a problem with students locking computers and then not coming back to them. We, as administrators can unlock them, but we need to allow other non technical members of staff to unlock machines. I understand that usually only the user who locked the machine or an administrator is capable of unlocking it. But is there any way of giving a user or group the ability to do so as I cannot give the other staff administrative accounts? I have been looking into this but so far have drawn a blank.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Unlocking computers that have been locked
- Thread starter SJO76
- Start date
We used to just reboot the machines, it helps keep any data open on the machine secure. You don't need any access rights to hit the reset button on the case, just make sure its not in a locked cabinet. It was tough luck for anybody who left the machine locked.
John
John
gpalmer711
IS-IT--Management
I have no way of testing this and it may not be what you want but here goes.
In NT based systems there used to exist as loophole, where if an account was locked out due to incorrect password attempts you could still use that account to unlock a screen saver password. I have dug up the MS article
In theory you could create a dummy admin account and lock it straight away. Then this account could do nothing on the network, but if the loophole still exists could unlock the workstation.
This may well have been plugged in 2000 and XP as it was with SP4 of NT. However you may still be able to use the registry key to reintroduce the loophole?
Greg Palmer
Free Software for Adminstrators
In NT based systems there used to exist as loophole, where if an account was locked out due to incorrect password attempts you could still use that account to unlock a screen saver password. I have dug up the MS article
In theory you could create a dummy admin account and lock it straight away. Then this account could do nothing on the network, but if the loophole still exists could unlock the workstation.
This may well have been plugged in 2000 and XP as it was with SP4 of NT. However you may still be able to use the registry key to reintroduce the loophole?
Greg Palmer
Free Software for Adminstrators
- Thread starter
- #5
Thanks for the info so far. I will have a look into your suggestion Greg.
BTW I think I should have elaborated on the problem to say that there is a legitimate need for students to lock the machines as we are a design college and rendering work is frequently done. Such students leave a post-it on the machine with their contact details. Of course this is abused.
I know we could always simply reboot the machines i was just looking for another solution.
Cheers,
Simon
BTW I think I should have elaborated on the problem to say that there is a legitimate need for students to lock the machines as we are a design college and rendering work is frequently done. Such students leave a post-it on the machine with their contact details. Of course this is abused.
I know we could always simply reboot the machines i was just looking for another solution.
Cheers,
Simon
Could you develop an acceptable use policy for the length of time a machine can be locked? If so, you can have the machine automaticly logout the user at the end of the acceptable period of idle time:
Some important usage notes and direct download source:
Some important usage notes and direct download source:
- Status
Similar threads
