Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista - Preventing users from logging off administrators in Vista?

Reply
 
Old 06-24-2007   #1 (permalink)
mrps2man


 
 

Preventing users from logging off administrators in Vista?

Hey everyone! I've got what would seem to be a really simply question here,
but after a little searching, I'm not so sure anymore. There is this strange
"feature" in Windows Vista which allows administrators to be logged onto a
computer and have the workstation locked, yet still be logged off by anybody,
even without any other accounts active. All that needs to be done is click
on "switch users" and then anyone can restart the computer, turn it off, put
it in standby and so on, and all this is without even having logged into any
given account. Unfortunately, this means an administrator who left tasks
running in the background, locked the workstation and walked away could
technically have all of his applications closed and the system rebooted by
literally anybody who can touch the mouse. Surely there must be a way of
changing this behavior? Thanks for any help and your thoughts on this!

My System SpecsSystem Spec
Old 06-24-2007   #2 (permalink)
Michael


 
 

Re: Preventing users from logging off administrators in Vista?

Not sure how your setup differs from mine, however if I (as an
administrator, vista home premium) 'lock' the computer then there is no
'switch user' available nor the buttons for shut down etc. (I locked by -
Start orb, small arrow, select lock). Without the password for the account
that locked the computer I don't seem to be able to get anywhere.

Michael

"mrps2man" <mrps2man@discussions.microsoft.com> wrote in message
news:9D2AC192-6B4F-49DC-BE6F-C4103E8C9D17@microsoft.com...
> Hey everyone! I've got what would seem to be a really simply question
> here,
> but after a little searching, I'm not so sure anymore. There is this
> strange
> "feature" in Windows Vista which allows administrators to be logged onto a
> computer and have the workstation locked, yet still be logged off by
> anybody,
> even without any other accounts active. All that needs to be done is
> click
> on "switch users" and then anyone can restart the computer, turn it off,
> put
> it in standby and so on, and all this is without even having logged into
> any
> given account. Unfortunately, this means an administrator who left tasks
> running in the background, locked the workstation and walked away could
> technically have all of his applications closed and the system rebooted by
> literally anybody who can touch the mouse. Surely there must be a way of
> changing this behavior? Thanks for any help and your thoughts on this!


My System SpecsSystem Spec
Old 06-24-2007   #3 (permalink)
Dave


 
 

Re: Preventing users from logging off administrators in Vista?

Did you actually do this?


"mrps2man" <mrps2man@discussions.microsoft.com> wrote in message
news:9D2AC192-6B4F-49DC-BE6F-C4103E8C9D17@microsoft.com...
> Hey everyone! I've got what would seem to be a really simply question
> here,
> but after a little searching, I'm not so sure anymore. There is this
> strange
> "feature" in Windows Vista which allows administrators to be logged onto a
> computer and have the workstation locked, yet still be logged off by
> anybody,
> even without any other accounts active. All that needs to be done is
> click
> on "switch users" and then anyone can restart the computer, turn it off,
> put
> it in standby and so on, and all this is without even having logged into
> any
> given account. Unfortunately, this means an administrator who left tasks
> running in the background, locked the workstation and walked away could
> technically have all of his applications closed and the system rebooted by
> literally anybody who can touch the mouse. Surely there must be a way of
> changing this behavior? Thanks for any help and your thoughts on this!


My System SpecsSystem Spec
Old 06-24-2007   #4 (permalink)
mrps2man


 
 

Re: Preventing users from logging off administrators in Vista?

Thanks, that just led me on the right track! The fix for this was actually
relatively simple. All that needed to be done was to remove the button from
the login screen. The procedure is as follows:

Windows Key + R (for Run) and type "gpedit.msc" (without quotes). Go to
Computer Configuration > Administrative Templates > System > Logon > Hide
entry points for Fast User Switching > Enabled > OK

After that, all is well and the switch user button is not available as would
be expected for a single-account computer. Thanks for your reply and
hopefully this can someday help somebody else as well!
My System SpecsSystem Spec
Old 06-24-2007   #5 (permalink)
mrps2man


 
 

Re: Preventing users from logging off administrators in Vista?

Did I actually do what? If you mean carry out the procedure for changing the
behavior, then yes, I did do it. Works like a champ!
My System SpecsSystem Spec
Old 11-30-2007   #6 (permalink)
Gord


 
 

Re: Preventing users from logging off administrators in Vista?

This RUN command did not work for me. I have MS Vista Home Premium (new
Toshiba Satellite Laptop A215-S7437, bought Nov2007). Full search of PC, incl
hidden and system folders, cannot find a file named "gpedit.msc". Is there
somewhere on the MS site that I can download this file from?? MS Help says
"switch users" is a default setting but provides no instruction how to
disable OR hide the setting!

"mrps2man" wrote:
Quote:

> Thanks, that just led me on the right track! The fix for this was actually
> relatively simple. All that needed to be done was to remove the button from
> the login screen. The procedure is as follows:
>
> Windows Key + R (for Run) and type "gpedit.msc" (without quotes). Go to
> Computer Configuration > Administrative Templates > System > Logon > Hide
> entry points for Fast User Switching > Enabled > OK
>
> After that, all is well and the switch user button is not available as would
> be expected for a single-account computer. Thanks for your reply and
> hopefully this can someday help somebody else as well!
My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
No users in Local Administrators Group Vista security
standard users can see administrators desktop files when uac is on Vista account administration
User Prof. service is preventing new users to logon Vista account administration
Preventing guest users or other users seeing your files Vista file management
Windows Vista Users Administrator and Administrators Vista General


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46