hi i need help about unlocking rights

[darkalien]

hi everyone

on some computers that are used by students/teacers/administrators i need a account that can unlock the computer when the admin locked it(the computer locks the computer after several min) but for the rest i want that account to have no admin premissions.

i want that account`s pass and username to be given to the students for when they want to use a computer locked by admin but i want that accounts to be useless for them.
so basicly a unlock/logoff only account

can any one help me with this?

[AdamV]

you could try an account with local admin rights but restricted so it has a deny against "log on interactively" and "connect to this computer across the network" for all machines in the domain

Not sure how well that would work, but worth a shot.

[darkalien]

dont think thats gonna be it
the computers are not in a domain
there all local computers and they have like 5 profiels
student teacher admin beheerder(admin like but with longer pasword) and sesam
and sesam has to get premisions to unlock computer when a admin locked it(start+L)
but till now i can only do that by giving sesam admin rights but i dont want that.
so basicly it only needs to have unlock and logoff rights

the reason i dont want it to have any other rights is that some students just like to keep us busy by changing settings and deleting files

[AdamV]

How about this variation then:

you could try an account with local admin rights but restricted so it has a deny against "log on interactively" ...for all machines.

[PreviousPoster]

you could put a shortcut in teh startup for your admin user you don't want logged in pointing to shutdown -f -t 00 -l