Security problem with Windows 2008 Enterprise

greetings !

i have server computer domain controller ... windows server 2008 enterprise, 32 bit .... 100 users 
95% call computers os windows 7 
have 2 location connected via vpn conection
issues related security ..... think malicious can inside or outside network on different computers see information etc. 
of course disabled user accounts , local administrator ..... , system administrator password changed periodically ... powerful ... , yet somehow bypass existing security 
know if there or disable other options 

thank !

hi kossma,

could clarify question, “my issues related security ..... think malicious can inside or outside network on different computers see information etc” did mean user logon computer not belong he? if can use following similar thread restrict account logon others computer.

the similar thread:

only allow ad users onto pc?

http://social.technet.microsoft.com/forums/windowsserver/en-us/6bceec6a-1db3-4084-a397-68a13a8a5459/only-allow-certain-ad-users-onto-a-pc?forum=winservergen

if suspected account has abnormal logon action can specific logon time monitor account logon behavior.

the related kb:

set logon hours

http://technet.microsoft.com/en-us/library/cc754934.aspx

hope helps.

---

we trying better understand customer views on social support experience, participation in interview project appreciated if have time.
helping make community forums great place.

Windows Server  >  Windows Server General Forum