someone logon my winnt with out passwork!!! help

[borhan]

I am using windows NT(4.0) and my computer is connected to other computers in the university. I just wondering is it possible for others to logon my system with out my password or form the net. It clear that someone always after me uses the computer ;however, I have changed my password ,I again realize that someone is using it.
please help me to understand how could someone accesses my computer with out password
thank a lot

[neo_otyugh]

have you turned off all other accounts in the user manager? what about checking for trojans? and lastly have you disabled all file and print sharing?

[borhan]

well
I disconnect my system to network and other connection like printer. right now it is like a personal computer but still same problem

[BBA]

Yes...it is possible. If you are connected to a Domain, any member of that domain can log on.

You can tell by searching the profiles...their logon ID will have a folder under WINNT/Profiles.

If you see any other that Administrator, All Users and your own ( maybe one from the IT person who built it too ) then you can pretty much tell.

If you have admin rights, then you can set rights to users and stop anyone from loggin in, and you can turn on auditing for security/system events from event viewer.

[deep_sky]

well the user after you could be using the guest account. as adminstrator you could turn off the option to allow the guest account to logon. i myself run windows 2000 and i can do that in adminstrative tools>computer management>local users and groups

i am sure that it is something similar in nt4
you should be able to lock people out of your computer regardless of whether they are in your domain or not. otherwise servers would not be very secure....

[SoopaStar]

Please don't double post. I saw this one in the operating systems forum too.

paul

[BBA]

Doenst matter what account...if your PC has been joined to the domain, and any domain users rights exist ( and they can be added while you are logged on from user manager for domains or Hyena ) then they can log on with any domain users id...any...no matter if your guest account is enabled or not.

Your best bet is to join a workgroup, remove all domain rights from user manager ( check the advanced user rights under policy's also ) Then rename your administrator account to something they will not guess, and then log on as another account altogether...one that does not have admin rights (keeps guessers out ) Then your ok.

Other than that, someone else knows NT better than you.

Look at it this way, if someone is breaking onto your PC, at least they know more than someone who only knows Win 98....but I'm sure that makes you feel better too.

[socalgal]

borhan

You have been asked before to NOT multiple post. Please refrain from doing so in the future.

It's inconsiderate to all those helping you as I have to close one (or more) threads. It's very frustrating to those replying in one thread to find another, same thread in another forum. It frustrates troubleshooting efforts for everyone.

AGAIN, my sincere apologies to those who have replied here. http://sysopt.earthweb.com/forum/frown.gif

http://sysopt.earthweb.com/forum/Forum9/HTML/001250.html