I'm using a Windows 7 64 PC in my company.
Today I found a strange username on the login screen. I checked and found some users' folders inside my Windows directory. Only my account from company domain and local admin can log in on this PC. The IT team and I discovered that someone from the weekend shift team cracked the local admin user (we think they use the infamous Hiren's boot tool). He also added a user group with all users from my company. So anyone can log in to the PC. And anyone is given admin permission so they can access all my files.
Some other guys took advantage and used my PC without permission. They're all gonna face the consequence later but the security hole is still there.
How can I prevent this case to happen? Or I have to deal with the fact Windows sucks and anyone can overwrite the admin's password.