Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Here is the issue.

At times we need to physically locate a PC. However the users tend to dismiss a pop-up notification. Additionally the PC may not be signed into and then the pop up will not display.

So my question is, given I have admin to the remote machine. Can I display full screen that says 'Call XYZ for Service', prevent a user from signing on, and if the user reboots the PC, display the same full screen.

Obliviously an Admin can undo the lock!

I currently have SCCM clients on all the PC's so maybe an SCCM solution.

I can code in .Net so maybe a code solution could help too...

Maybe altering the default wall paper so that it even shows when no-one is logged in...

share|improve this question

2 Answers 2

up vote 3 down vote accepted

In Active Directory domain environments I do what you're looking for by dragging the computer object into an OU that has a GPO applied that denies "Log on Locally" rights (via "User Rights Assignment") to "Domain Users". Normally this generates a support call.

One nice thing about this method is that the settings revert to "normal" when the computer object is moved back to its original location in AD. No persistent changes are made to the PC (that aren't, at least, undone by the Group Policy client).

I don't typically need to do this "right now", so when I make such a change I expect to find out about it the next time the user reboots or tries to logon again.

If you wanted to do that "right now" to a PC just move it in AD and send it a restart request via the shutdown command. That'll get the user's attention, though they may lose work if they don't save and close programs before the reboot happens. You should probably set a fairly long shutdown delay when you do that. Obviously, if they're not at the computer they're not going to see it, so this method isn't without problems.

share|improve this answer

Default wallpaper and trigger a screen lock repeatedly or with a timeout of 5 seconds oro less? (that would cause me to call support).

To be honest though, this seems like the hard and intrusive way to physically locate a computer, most particularly because it relies on the user.

If you have managed switches you should be able to narrow the physical location down to a single port on the switch, that port on the switch to a wall port, and the wall port to a computer.

share|improve this answer
    
Yes we do disable the port as an extreme. I was just wondering anyone out there had options. –  ggonsalv Aug 22 '10 at 3:30
    
Maybe I'm confused. I thought you wanted to locate the computer, not disable it. These suggestions all seem aimed at disabling. If you have access to run software on the computer, there might be programs to flash the keyboard LEDs, the HD LEDs, or the NIC LEDs (I know that all three of those are possible in Linux) –  Slartibartfast Aug 25 '10 at 1:32

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.