2,367 reputation
1123
bio website harryjohnston.wordpress.com
location New Zealand
age 45
visits member for 2 years, 7 months
seen 18 hours ago

I work in the technical support group of the School of Computing and Mathematical Sciences, The University of Waikato, New Zealand. My primary responsibility in this role is maintenance and support for several computer labs, comprising over 200 Windows PCs used for teaching.

I am married with two sons, aged 11 and 8.

I can be contacted at harry.maurice.johnston@gmail.com.


Apr
9
comment Windows sessions: Process Explorer vs. Logonsessions.exe
I think this is a programming question, and should probably be on Stack Overflow. But in short, you're confusing Remote Desktop sessions with logon sessions. They're (more or less) unrelated.
Apr
9
comment UAC Whitelist for system processes?
The whitelist is baked into Windows itself. There's no known way to modify it.
Mar
25
comment How do I allow interactive services in Windows 7?
Note that as of Windows 7, the UI0Detect service is not started by default. If you need to access legacy interactive services, you may wish to change the configuration for UI0Detect to start automatically.
Mar
20
awarded  Notable Question
Mar
19
answered What windows permissions should be set to protect a directory while allowing it's contents to be modified?
Mar
19
revised NTFS: prevent/deny directory delete in a otherwise “personal” folder
added notes about users being able to move the directory
Mar
7
awarded  Notable Question
Feb
18
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
What does net localgroup Administrators (run from the command line) show?
Feb
18
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
@BlueBerry-vignesh4303: if your colleague does not have admin credentials on your machine, then there's something wrong with the machine. Non-admin users are not supposed to be able to shut down machines remotely. Get your IT support staff to investigate.
Feb
18
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
@MAKZ: the colleague is using shutdown.exe to shut down the OPs machine. This only works because shutdown.exe uses the colleague's network credentials to log into the OPs machine. So the colleague is logged in.
Feb
18
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
No, but this option seems particularly ineffective to me. And if you consider the big picture, messing with the other guys computer probably isn't a good idea, as it's only going to escalate things, and it makes you look bad if and when management get involved.
Feb
17
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
... and what's supposed to stop them from downloading another copy, or any program with similar functionality?
Feb
17
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
Uh ... in this scenario, the other user is running the copy of shutdown.exe on their own machine, not the one on the machine being targeted. So deleting your copy really isn't going to help.
Feb
17
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
Well, as an example, you could use psexec to run shutdown on the machine locally. The "deny access to this computer from the network" policy should block this class of attack, but may also prevent legitimate access as in the OPs situation.
Feb
17
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
When you use shutdown.exe to shut down a remote machine, the first thing it does is to use your account credentials to log into that machine. So while the explanation quoted above is absolutely correct, it isn't relevant to this situation, because the user is logged in.
Feb
17
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
Note, however, that if you have administrator access, you can bypass this policy if you really want to. It just makes it a little trickier. The bottom line is that if the bad guy has admin to your machine, you've already lost.
Feb
17
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
@Tomas: no, you need to be an administrator on the machine you're trying to shut down. I'd have thought that was obvious!
Feb
17
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
If the colleague weren't an admin, he wouldn't be able to shut down the machine remotely (unless the machine is badly misconfigured). The setting you've indicated is completely irrelevant.
Feb
17
comment My colleague often shuts down my machine through the LAN - how do I prevent it?
@Tomas: no, by default you need Administrator privilege to remotely shutdown a computer. Odds are the colleague does indeed have admin privilege, though it's also possible that the machine is configured improperly.
Jan
18
awarded  Popular Question