Member Avatar for ItIsFinished

Hey guys, does anyone know of a way to make a Windows XP box require a password to log off by any means. We are trying to lock down a computer and make it so you can't log off. Unfortunately we have a few sharp guys at work and they were able to log off bypassing the registry and gpedit.msc changes that we have made. They simply went to the run command and typed "logoff". Rather than disabling every feature in windows, I would like to make a password requirement to log off. Any suggestions or help would be greatly appreciated.

  • 2 Contributors
  • 3 Replies
  • 123 Views
  • 6 Hours Discussion Span
  • Latest Post Latest Post by jbennet

Dani AI

Generated

already hit the key point: Windows has no built‑in “require a password to log off” feature. A logoff ends the session, so the OS does not prompt for credentials to perform it. That means the practical fix is to stop people from invoking the logoff/shutdown mechanisms, not to try to make logoff itself ask for a password. was right that hiding Start/Menu items helps, but UI hiding alone can be bypassed.

A more robust approach is to block the programs that perform logoff/shutdown using Software Restriction Policies (local or domain GPO). Create a new Software Restriction Policy (gpedit.msc → Computer Configuration → Windows Settings → Security Settings → Software Restriction Policies), then add Disallowed rules for the system binaries in the System32 folder that trigger a session end. Use Hash rules where possible so users can’t just drop a different copy somewhere. Test each rule carefully because there are multiple ways Windows can be asked to end a session.

If SRP is not acceptable, tighten NTFS execute permissions on the specific system binaries for the non‑admin users (take ownership first, then remove Read & Execute for Users). This is blunt and risky — it can break expected behavior and should be done only after a full backup and with an emergency admin account available.

For kiosk scenarios, replace the shell with a locked application or use dedicated kiosk/lockdown software. That prevents users from accessing the normal UI and command paths. In all cases: work on a test account, keep a separate local Administrator recovery account, document rollback steps, and consider upgrading from XP (unsupported and insecure) for long‑term control options.

Recommended Answers

All 3 Replies

Member Avatar for jbennet

no. only real way is to disable logoff in start menu, control alt delete menu, and run.

Member Avatar for ItIsFinished

no. only real way is to disable logoff in start menu, control alt delete menu, and run.

How do you disable through the run command, without disabling other commands?

Member Avatar for jbennet

you can remove run from start menu

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.