How do you grant or stop someone from having full access to your computer? I work in IT and alot of people he

Question

How do you grant or stop someone from having full access to your computer? I work in IT and alot of people here use PS tools to kill people's processes. How would I stop that?

Answer 1

You could always use a password.

Answer 2

if you make an account, you can edit what it can do

Answer 3

Well any administrative processes should be running at a higher level of rights than a user.  Giving users administrative rights without a need for administrator is a bad practice so make sure users only have "user" level permissions.  Once you have that, they won't be able to kill the processes.

** Edit **

As soon as you allow users administration (admin) on the box, all control is lost.  Unless a user requires administrative rights as part of their regular job, they shouldn't have it.  Any that require it should be required to acknowledge a company policy of "administrative rights".  That policy should define what can/can't be done.  Generally includes guidelines on how they are to restrict themselves on systems (i.e. can't read other users files, can't disable anti-virus, can't install unapproved software, etc....).