Problem solve Get help with specific problems with your technologies, process and projects.

How can I prevent my coworkers from logging onto my PC through AD?

How can I prevent my coworkers from logging onto my computer through Active Directory? How can I stop them once and for all? I don't want data to be erased or corrupt.
In the Local Security PolicyWindows SettingsSecurity SettingsLocal PoliciesUser rights container, remove all groups that your coworkers belong to from the user right "logon locally." Make sure that your account, or some group that you and not they belong to, does have this right. Note that you must have local administrator privileges to do this. You may need to get help from an administrator.

In addition to the above, you can remove their ability to access your computer across the network by removing their user right. You should also not share folders, run a Web server on your computer, run remote administration programs (see your domain admins), run antiviral software to prevent Trojans and apply file and folder access permissions. Nothing can stop a determined attacker forever, but you can certainly build in layers of security that will defend your data files from your fellow workers.

You should also seek help from your information security staff. If you are having a problem with fellow workers destroying data files or abusing system privilges, security should be made aware.

Dig Deeper on Windows 10 security and management

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.