Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have installed Windows Server 2008 @ my office, I have created 2 admin accounts and one user account(publicly shared to all team members for backup of their data on some shared folders).

They are working fine. But some time when I was out of office, non admin user able to logon and access this machine.

So I would like to disable non admin user, which can not login on this machine, just access shared folders.

What should I do?

share|improve this question
add comment

1 Answer

By default, normal users cannot log in interactively to a Windows Server, so one of (at least) 2 things must have happened

1) They know an admin password (and logged in with that, or someone made their accounts admins, etc).

2) Users have been granted the log on locally right (this might have happened if the remote desktop user role is installed on that box, or more likely, if someone was trying to make a server behave like a terminal server but without installing the role)

In order to stop non-admins logging in, you need to find out what changes have been made to the default windows server configuration to allow them to log in, and reverse those changes.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.