Allow staff to unlock workstations logged in as a student

[FN-GM]

Hi,

Students are starting too locked there workstations and wonder off. This makes the next person who wants to use the computer either, A: unplug the machine or B: call us to unlock it. Stopping students locking workstations isn’t an option.

Is there a way to allow staff to unlock only student accounts? I cannot find how to grant standard users to unlock workstations I have had a look around delegate control but can’t find what I am looking for.

We are in a Server 2003 domain environment. Can anyone help me with this please?

Thanks

[Edu-IT]

Would it not makes sense to prevent students from locking their workstations altogether?

[FN-GM]

Please read my original post

Stopping students locking workstations isn’t an option.

[Edu-IT]

Please read my original post

Think you may have added that while I was replying. It certainly wasn't there when I replied otherwise I wouldn't have suggested it would I? ;-)

[Michael]

If a machine is locked as a pupil and a member of staff enters their username and password, this should prompt you to logoff the user; however, any unsaved work will be lost.

[FN-GM]

Think you may have added that while I was replying. It certainly wasn't there when I replied otherwise I wouldn't have suggested it would I? ;-)

It was there from the beginning you can ask another forum member I am talking to on MSN. I only edited the post to bold that point you missed. If you look at the time it was edited, you will find it was edited a 4 mins after your post.

If a machine is locked as a pupil and a member of staff enters their username and password, this should prompt you to logoff the user; however, any unsaved work will be lost.

Yer that is a problem, but they normally get unplugged or we log them anyway so it will be no different to what we currently do.

[localzuk]

If a machine is locked as a pupil and a member of staff enters their username and password, this should prompt you to logoff the user; however, any unsaved work will be lost.

I think he wants a way of doing that. Staff accounts in most schools are not administrators...

Would adding them to the local administrator group on the machines do what you want? Although it does open up a security hole then.

[FN-GM]

I did think that but its not an option really.

Thanks for the comments

[Geoff]

How about using the 'logoff' screensaver to logoff pupils who have left their machines logged in?

[FN-GM]

Would that work if they have locked the machine?

[john]

As ever Google provides the solution - Any user can unlock now with this custom GINA That seems to offer you what you need but check the legality of it

[FN-GM]

I did find that but im looking for a more Microsoft way. I’m sure there is way of doing it. If all else fails i will try that.

[Geoff]

Would that work if they have locked the machine?

Yes, it will.

[FN-GM]

Ok that will be good then, one snag is leaving them locked when they have a double lesson with dinner between them. If there is no other way i would use that method.

Surely there is a way to allow standard users to unlock workstations using Windows.

[Geoff]

The only other thing you could try would be:

Computer Configuration->Windows Settings->Security Settings->Local Policies->Security Options->Shutdown: Allow system to be shutdown without having to log on."

But that doesn't really get you what you wanted.