Eventhough I locked my Administrative user, IT staff Unlocked it. is it Possible? Is there any default pswrd?

Question

I am working in Windows XP in my office. I had locked Administrative password for secured use. But Last day IT people unlocked it when i was not there. How is it possible? is there any way to Lock my system in such a way that no one can unlock?

Answer 1

The short answer is no. In all probability, you're on an NT Domain (if you see something like MYCOMPANY\user at login, you're on a domain). Domain-joined computers are always subject to domain administrators, who can override machine-level accounts. In other words, your IT administrator will always be able to log in after you lock your computer, no matter what your local settings are. As for the local administrator login, there are two kinds:



There is the Administrator privilege level, which means the account with those privileges can do most anything to the machine, and then there is the Administrator account, which is created by default on XP so that there will be an account at the Administrator privilege level for fixing problems and maintaining the machine. It's a good security practice to put a strong password on the Administrator account to prevent unauthorized access. Of course, IT can still unlock your machine, even if it's locked from the administrator account. If you're still unsure about it, ask them. Your company probably has a set policy or practice about how this is to be handled.

Answer 2

If your computer is part of a Windows network, then probably the IT staff has access to your computer by being members of the local "Administrators" group. Most often, when a computer is joined to a company network, the Domain Administrators have Administrative access to your computer. You can see who all has administrator access on your computer by looking at the "Administrators" group on your computer.



1) Right-click "My Computer", choose "Manage".

2) Open "Local Users and Groups".

3) Click "Groups"

4) Double-click "Administrators".



Every user or group listed here has administrator access to your PC and can unlock your computer as described here.

Answer 3

well, if its your work computer, there is a admin user besides your administrative user which the IT crew has added to your machine for maintainance and security.



If you want to verify, open the User Accounts tool, open Control Panel from the Start menu, and then double click User Accounts.



Check all the accounts. Disable all but one account thats your admin account.



Beware though, you may be making enemies with your IT people if you do that.



DO NOT ANNOY THE GEEKS i recommend :)

Answer 4

Open user account. Then on the "Administrators" group, remove domain admins and any other user/groups. Then add only yourself into that group. Your IT people will be unhappy and might reformat your computer or remove you from local administrators account.

Answer 5

You may have administrator privileges on your machine, but you are not the highest level user. Only the IT guys know the highest level password(s). Do not piss them off.



Furthermore, you shouldn't be doing anything on your work computer that you would have to try and hide.