2

the point is, if i'm logged in (and as almost every windows user, i've got an admin-account), and someone comes across my not locked pc, it is possible to change my password the pro-way through using:

net user Admin %NEW_PASSWD%

what can i do to prevent that, besides not being logged in as admin.

i once saw a way, where the 'net user' command was substituted by a .bat file. so if you call 'net user Admin ...', it runs this .bat-file instead, which locks the notebook immediately.

problem is, i honestly don't know how i could let windows substitute eg net.exe with a .bat-file. (too little windows knowledge)

do you know any way how to do it? i'd appreciate it.

Improve this question
3
  • 3
    Even if you could do that, there are so many other ways to get around it, that it would be pointless. The only way would be to not run as admin.
    – paradroid
    Commented Dec 29, 2010 at 9:41
  • 2
    Try not running as admin (really, you almost certainly don't need to) and remembering to lock you computer.
    – Cry Havok
    Commented Dec 29, 2010 at 10:47
  • 2
    Why are you not locking your computer when other people are around that could access it when you aren't? That's just bad personal policy.
    – BBlake
    Commented Dec 29, 2010 at 11:59

2 Answers 2

Reset to default
3

Possible solutions:

  1. Lock your PC when you leave it. Most companies make this a policy. ChrisF beat me to post this.
  2. Rename NET.EXE in your Windows System32 folder or place NET.BAT earlier in your PATH with something that locks the machine (psshutdown -l).
  3. And the obvious that's been suggested already - don't run as admin.
Improve this answer
2

Possible solutions - but all have drawbacks:

  1. Make sure you lock you PC every time you step away even for a minute. This requires you to change your behaviour.
  2. Set your screen saver wait time to 1 minute and password protect. This won't stop someone who comes across your PC within the first minute and will get annoying as it will kick in even if you are sitting at the PC - you aren't constantly using your PC.

The only real solution is to run as a non admin.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .