Thread: Reimplement Lock Feature Without Installation Privileges

The workstations at my workplace do not allow for us to lock our computers, nor do they allow us installation access. Therefore, I am wondering if it is possible to reimplement the Windows Lock feature into a simple executible file (so that I do not need to install anything) to keep others from messing with my workstation while I am away. Thanks in advance.

You probably are just out of luck. If you cannot even install a program, you proably will not be able to edit the system security profile. If you can (sounds like your security people are on the wrong team, maybe you can ) it is under Control Pannel -> Administrative tools -> Local Security Settings. Look at the local policies, then security options. Disable the "Interactive Logon: Don't require CTRL-ALT-DEL to logon.

Well, to clarify a bit, I do not have a local account on the machine. I logon via an account set up through Active Directory and connect to the domain. I'm quite positive that I do not have access to modify anything within the Administrative Tools, but I can install things to a network drive (though not a local one). Does that change the situation at all?

Originally Posted by queue

install things to a network drive but not to a local one

Do you mean you can SAVE things to a network drive? Install implies that you have the permissions to write things to the local registry.

A network account does grant some privledges to the local machine, if the local machine is a part of the network.

Originally Posted by Kennedy

Do you mean you can SAVE things to a network drive? Install implies that you have the permissions to write things to the local registry.

Yes, you are correct. I can save things to a network drive, but I do not have access to the local registry.

Originally Posted by Kennedy

A network account does grant some privledges to the local machine, if the local machine is a part of the network.

The local machine is part of the network. However, I think the sysadmin placed quite a few restrictions on local access from network accounts, though it's not completely restrictive.

Sentence 1, post #2.

If;

1) You are running under windows NT/2000/XP/etc

2) All you want to do is lock your screen.

Then have a look here. The sslaunch.zip which is available as a link from there contains a program (with source code provided) that when run will start your selected screen saver.

This is not a complete security solution but, used in conjunction with a screen saver and password protection enabled .....

Thanks for your post, grumpy. However, the sysadmin has limited our local access to the point where we cannot even set our own screensaver, much less password protect it.

I was looking more into the realm of writing something that would not be susceptible to ctrl-alt-del or alt-tab and only return to the workstation if the username and password matched in a user database (most likely implemented through a text file). And, as always, I cannot touch the local registry. Just how feasible would this be, and is there already an existing solution?

Originally Posted by Queue

Thanks for your post, grumpy. However, the sysadmin has limited our local access to the point where we cannot even set our own screensaver, much less password protect it.

That suggests that you're trying to do something the sysadmin doesn't want you to do.

As Wraithan said, have a word with the sysadmin. If you have a genuine reason, s/he can set up something for you.