windows 2003 question

[billb]

if i want to give a user permission to log of another user who has locked their screen how do i do this? ie is there a built in group they should be in etc?

thanks

[BliarOut]

They need to be a member of Administrators... Do you really want to do this?

[billb]

BliarOut said:

They need to be a member of Administrators... Do you really want to do this?

nope

is there no other way round it as im in a school where kids leave workstations locked even though they shouldnt and need certain people to be able to unlock them?

[neil_cardiff]

Then disable the 'lock workstation' fuctionality in Group Policy (GP) - giving anyone Administrator access is a royal pain in the arse.

If you want to allow certain users to have the lock workstation functionality, then create an OU with a GP amended appropriatly so that it does not inherit the overall GP.

SO - choose whether you want everything to have the default lock workstation or not, and then create a child group that dosen't get it applied.

Thats basicly the whole point of Group Policy!