How to prevent Employee from Bypass / Bridge Administrator Password to Install unauthorized software & Torrenting?

[DaveMedan]

So, apparently 2 of our employee manage to bypass our Admin password and install torrent software to Company's PC.

There are two local user:

1. Administrator with password - they supposedly don't know.  

2. User with password - they use this one.

 

Even though they already sign the User Agreement for company PC.

They confess that they ask 3rd party (outside of our organization) : ex employee and their kids to do it.

Either they know the Admin password or they find a way to bypass it.

From Google Search this what I found:

https://itoolab.com/windows-password/how-to-bypass-admin-password-windows-10/#:~:text=Method 1%3A Bypass Admin Password Windows 10 Using Lusrmgr&text=msc” in the Run bar,admin account without any software

 

How to prevent them next time from doing it again?

Should we just use M365 Business Account to log them?

 

Thanks

 

 

 

 

[offweek]

There are things you can do, but anyone who controls the hardware can potentially still break through.  Giving someone work hardware for the specific purpose of 'breaking in' is always a sackable offense and likely a criminal one too.

 

That said:
https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/wdac-and-applocker-overview
https://support.microsoft.com/en-us/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838

[lieder1987]

You mean ex employees?

[Blqckqut]

fire them or tell em to not do it lol

[Vishera]

A lot of corporations use Employee Monitoring Software to deal with such issues.

After all it's a corporate computer - not a personal one.

 

The Best Employee Monitoring Software for 2023:

https://www.pcmag.com/picks/the-best-employee-monitoring-software