This step-by-step article describes how to prevent unauthorized users from accessing either a stand-alone computer, a network computer, or a remote computer. Each of these types of computers has different security requirements and the topic of security is complex. This article describes some simple procedures to secure your computer.
For another user to access your computer, they must either be assigned to an administrative group or they must have the appropriate security rights and permissions.
A stand-alone computer is a computer that is not connected to other computers or network devices. To prevent unauthorized users from accessing your computer, make sure that you lock your computer before you leave your desk and configure screen saver passwords.
A network computer is a computer that is connected to other computers or network devices. To prevent unauthorized users from accessing your computer over the network, turn off both the guest account and the File and Print Sharing functionality.
A remote computer is a computer that connects to other computers or network devices by using either a phone line or a wireless connection. To prevent unauthorized users from accessing your computer if you are using Windows 2000 Terminal Services, set the encryption level to Highest on the computer that is running Terminal Services:
On the computer that is running Terminal Services, click Start, point to Programs, point to Administrative Tools, and then click Terminal Services Configuration.
Right-click the connection that you want to modify in the details pane, and then click Properties.
On the General tab, click High in the Encryption level list.
NOTE: You can configure only one Remote Desktop Protocol (RDP) connection for each network adapter in a Terminal server. Typically, the RDP connection that is configured automatically when you install Terminal Services is the only connection that you require.