I have an OS X 10.6 server, which I administer via SSH and VNC (via SSH tunnel).
I can't leave it at the login window since then VNC connections are refused. Therefore I currently leave it logged with my user account.
Since it doesn't have a monitor attached, it doesn't go into screen saver mode, which means it doesn't require a password to retake control. This means it is very easy for anyone connecting a keyboard/mouse and monitor to take control of the system.
The screen saver password protection, which I can't get to activate, unlike the system's login window, is perfectly compatible with VNC connections.
How could I prevent such direct access to the server without connecting a monitor and without blocking my ability to connect with VNC?