ALE52
10-21-2005, 05:03 PM
I have the following:
1 W2k 2000 Standard server with all SP's
6 W2kPro workstations
this network is set up not to connect to the internet as it is a school and the kids don't need access to it.
when the kids logon to the network i have a GPO that restricts access to everything except the school program, and that is setup to run automatically in the Startup folder of each pc.
Here lies the problem: the students got ahold of the network documentation book i made for the school [some bozo left it in the classroom and the info went around the class like a cheap woman]. anyway, one of the kids figured out how to logon LOCALLY with admin priviliges one any of the workstations in the classroom and can access the internet unrestricted. i have the name for local account for the admin changed with a password, the guest account is disabled, my account as local admin disabled, yet this kid can still get in.
i'm not on-site but i have about a week before the school administrator goes on vacation for a month.
any help would be appreciated.
1 W2k 2000 Standard server with all SP's
6 W2kPro workstations
this network is set up not to connect to the internet as it is a school and the kids don't need access to it.
when the kids logon to the network i have a GPO that restricts access to everything except the school program, and that is setup to run automatically in the Startup folder of each pc.
Here lies the problem: the students got ahold of the network documentation book i made for the school [some bozo left it in the classroom and the info went around the class like a cheap woman]. anyway, one of the kids figured out how to logon LOCALLY with admin priviliges one any of the workstations in the classroom and can access the internet unrestricted. i have the name for local account for the admin changed with a password, the guest account is disabled, my account as local admin disabled, yet this kid can still get in.
i'm not on-site but i have about a week before the school administrator goes on vacation for a month.
any help would be appreciated.