Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am configuring a Windows 7 computer that will be administered over RDP. The PC is not member of a domain. Is there a way to prevent users from logging in locally and kicking the admin?

I have no control over the users since it will be a public terminal in a store. I am running Windows 7 Professional.

share|improve this question
I'm confused. This seems like the type of system an admin shouldn't (normally) be logging into during the store's operating hours. – Iszi Jul 11 '12 at 16:31
You're better off using VNC for this as you can 'Lock' the terminal while you're logged on. – HaydnWVN Jul 12 '12 at 11:04

With consumer versions of Windows, the RDP link will get kicked off if someone logs in to the local console, and there is nothing you can do about it while keeping within the EULA terms. Server products allow you to do this (i.e. Server 2000, 2003, 2008, 2008R2), and even allow two RDP connections PLUS a locally logged in user!

Having said that, I'm sure there are shady areas on the Internet that will unlock this for you, but it would definitely not be allowed to be posted here if it violates the EULA

share|improve this answer

I solved the issue by making a script that disables the local user account when I take over. I have a scheduled task running to enable it again, when I am done.

$user = [ADSI]"WinNT://localhost/kiosk"
$user.userflags = 2
share|improve this answer
Uhm... what kind of script is this? – Bob Jul 12 '12 at 9:46
As a follow-up to my previous comment (now that I have a little more experience), it looks like a PowerShell script. But I haven't tested it. – Bob Aug 22 '13 at 4:34

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .