Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

Blocking certain log in IDS locally ?

Thread Tools
 
Search this Thread
 
Old 19 December 2007, 08:50 PM
  #1  
pimmo2000
Scooby Regular
Thread Starter
iTrader: (6)
 
pimmo2000's Avatar
 
Join Date: Sep 2004
Location: On a small Island near France
Posts: 14,660
Received 4 Likes on 4 Posts
Default Blocking certain log in IDS locally ?

I need to work out how to set my Networked PC to only allow me to log on. I have development user rights so I can access regedit etc.. but just need an idea what to change ?
Old 19 December 2007, 09:10 PM
  #2  
Luminous
Scooby Regular
iTrader: (3)
 
Luminous's Avatar
 
Join Date: Aug 2004
Location: Muppetising life
Posts: 15,449
Likes: 0
Received 0 Likes on 0 Posts
Default

Is just passwording your account too simple?
Old 19 December 2007, 09:16 PM
  #3  
pimmo2000
Scooby Regular
Thread Starter
iTrader: (6)
 
pimmo2000's Avatar
 
Join Date: Sep 2004
Location: On a small Island near France
Posts: 14,660
Received 4 Likes on 4 Posts
Default

Originally Posted by Luminous
Is just passwording your account too simple?


My account is passworded.. but I want my PC to only allow my log in !
Old 19 December 2007, 09:21 PM
  #4  
HankScorpio
Scooby Regular
 
HankScorpio's Avatar
 
Join Date: Feb 2004
Posts: 5,848
Likes: 0
Received 0 Likes on 0 Posts
Default

start
run
secpol.msc

expand local policy, user rights
Set "allow logon locally" to yourself and if you don't want to **** people off - "administrators".
Old 19 December 2007, 09:39 PM
  #5  
pimmo2000
Scooby Regular
Thread Starter
iTrader: (6)
 
pimmo2000's Avatar
 
Join Date: Sep 2004
Location: On a small Island near France
Posts: 14,660
Received 4 Likes on 4 Posts
Default

Originally Posted by HankScorpio
start
run
secpol.msc

expand local policy, user rights
Set "allow logon locally" to yourself and if you don't want to **** people off - "administrators".
Oh sir you are a GOD
Old 19 December 2007, 09:59 PM
  #6  
HankScorpio
Scooby Regular
 
HankScorpio's Avatar
 
Join Date: Feb 2004
Posts: 5,848
Likes: 0
Received 0 Likes on 0 Posts
Default

nah, geek maybe...
Old 19 December 2007, 10:13 PM
  #7  
pimmo2000
Scooby Regular
Thread Starter
iTrader: (6)
 
pimmo2000's Avatar
 
Join Date: Sep 2004
Location: On a small Island near France
Posts: 14,660
Received 4 Likes on 4 Posts
Default

Originally Posted by HankScorpio
nah, geek maybe...
What about making it refuse certain log ins ?
Old 19 December 2007, 10:14 PM
  #8  
pimmo2000
Scooby Regular
Thread Starter
iTrader: (6)
 
pimmo2000's Avatar
 
Join Date: Sep 2004
Location: On a small Island near France
Posts: 14,660
Received 4 Likes on 4 Posts
Default

Deny log on locally... ****ing magic
Old 19 December 2007, 10:18 PM
  #9  
Luminous
Scooby Regular
iTrader: (3)
 
Luminous's Avatar
 
Join Date: Aug 2004
Location: Muppetising life
Posts: 15,449
Likes: 0
Received 0 Likes on 0 Posts
Default

I must have missed the point here somewhere.

I got the impression you were talking about your own personal networked PC. In which case removing any spurious accounts (apart from admin and your own) then making sure they are passworded it job done
Old 19 December 2007, 10:27 PM
  #10  
HankScorpio
Scooby Regular
 
HankScorpio's Avatar
 
Join Date: Feb 2004
Posts: 5,848
Likes: 0
Received 0 Likes on 0 Posts
Default

I'm guessing shared networked pc in an office (shifts..?).

Secpol is very powerful and it's not smart so will only do what you tell it with no sanity check so a little caution required, it can end in tears and rebuilds....
Old 19 December 2007, 10:35 PM
  #11  
Luminous
Scooby Regular
iTrader: (3)
 
Luminous's Avatar
 
Join Date: Aug 2004
Location: Muppetising life
Posts: 15,449
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by HankScorpio
I'm guessing shared networked pc in an office (shifts..?).

Secpol is very powerful and it's not smart so will only do what you tell it with no sanity check so a little caution required, it can end in tears and rebuilds....
oh yeah, been there...done the rebuild

If it is in an office, if there is no physical security then there are various ways to gain access. I have never been in the cracking scene, but I do know that there are tools that fit onto a USB pendrive that can allow a knowledgable user to gain access.

If its your files that are on the machine that you need to secure, you need to actually encrypt them. Relying on windows to do the job is not sufficient. If someone resets the admin password, they can take ownership of your files, even if you use Windows encryption.
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
KAS35RSTI
Subaru
27
04 November 2021 07:12 PM
bluebullet29
General Technical
9
05 October 2015 02:17 PM
Ganz1983
Subaru
5
02 October 2015 09:22 AM
wms-racing
Wanted
0
28 September 2015 10:05 AM



Quick Reply: Blocking certain log in IDS locally ?



All times are GMT +1. The time now is 07:26 PM.