Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm a member of VPN at my work (I'm not the admin of the network), I have installed windows 7 pro on my pc myself and all the other software, and I am the admin of my PC, is it possible for someone else to see my screen or log my actions ? if yes how can stop this ?

share|improve this question
too vague. Is this a company-owned machine? Do you have admin privileges on the machine? – user5195 Jan 23 '10 at 17:40
yes, it is company-owned machine, but I have installed windows myself and I am administrator of the machine ( with password) – Omu Jan 23 '10 at 17:56
up vote 6 down vote accepted

I am using Windows 7 Pro and I think that somebody frommy VPN could see my screen how can I stop this?

Ultimately, if this is a company laptop and you're working on company time, they can do whatever their HR policies say they can do so trying to thwart something like this is an exercise in futility and could be "career limiting". Can you tell us:

  • Who do you think is spying on you?
  • Why do you think they're spying on you?

Nonetheless, to offer a pertinent answer...

For someone to access your PC in that manner, two major things must happen. First, they have to have knowledge of an account on your PC with sufficient privileges to install a service like VNC, Dameware etc. Second, your firewall must be set to allow traffic on the necessary ports.

To take care of the first issue, delete all unnecessary user accounts, disable the local administrator account and change all necessary user accounts' passwords to something complex. The second issue is a trivial matter of ensuring all unnecessary ports are blocked with a software firewall.

However, if your machine is a member of a domain, the machine is accessible to any member of the Domain Administrators group. You can do nothing to prevent this. You could always disconnect from the network that you suspect the "spying" is coming from.

share|improve this answer

No, they can't. A virtual private network implies that you are connected to a local area network via the internet. It has nothing to do, in itself, with sharing desktops.

In other words, other members of the virtual network can do nothing more than they could if you were physically connected to the LAN at your work.

share|improve this answer

The fact that your computer is in VPN does not allow anyone to do anything with your computer. It is however possible that there are programs running on your computer that log your actions or allow someone to access your computer remotely (eg. RealVNC, TeamViewer) and/or that your file sharing allows someone to access your files and folders.

share|improve this answer

What indicates to you that this is happening?

Are you using Remote Desktop? There are instructions at that link to turn it on (and off).

Or perhaps you have another remote access setup like UltraVNC or RealVNC which you can disable.

share|improve this answer
I've installed windows and all the programs myself, there is no any other program installed, could they see my screen, or see actions that I do, anything ? – Omu Jan 23 '10 at 17:58
how can I disable this VNC, so that nobody would be able to use it to see my screen ? – Omu Jan 23 '10 at 17:59
If you (or someone else) didn't install it, it's not there. – Dennis Williamson Jan 23 '10 at 18:51
so they cannot see my screen without installing some software on my pc ? – Omu Jan 23 '10 at 19:00
Omu, they have to install something first... but even so they could install it "on the fly" and uninstall it immediately as well. DameWare's Mini Remote control does just that. Tell us more about your situation because our collective "Spidey Sense" is making us uncomfortable. – Wesley Jan 23 '10 at 19:10

A software based firewall could potentially stop this if you know what is being used.

You could install Wireshark to monitor the network traffic to/from your computer to see if anything is happening. This would also tell you the ports being used, and you could then use a software or hardware based firewall to block those ports.

share|improve this answer

A good firewall will block any attempt to access your computer.

However, the network administrator might have the freedom to install software on your computer that will log your actions.

If you wish to lockdown your installation, you might have a look at AppLocker, with which it is possible to prevent users who have administrative permissions to the system from running administrative tools. A very extensive article about it is found in An Introduction to AppLocker.

share|improve this answer
I'm on Windows 7 pro so I cannot use AppLocker – Omu Jan 23 '10 at 22:16

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .