A manager calls the help desk to ask for assistance with creating a more secure environment for the finance department, which resides in a non-domain environment. Which of the following is the best method to protect against unauthorized use?

While implementing password expiration can enhance security by ensuring users regularly update their passwords, it does not directly prevent unauthorized access if users' accounts are compromised. In a non-domain environment, where password management might be less stringent, this method alone may not sufficiently secure sensitive finance department data.

Screen locks are a good practice to prevent unauthorized access when a user leaves their workstation unattended. However, they do not address the underlying issue of user access control. If users have broad access rights, even locked screens could lead to data breaches if unauthorized individuals gain access to logged-in sessions.

Disabling unnecessary services can reduce the attack surface of a system, potentially preventing exploitation through unused features. However, this method does not specifically address user permissions or access to sensitive data. It is a preventative measure but insufficient for protecting against unauthorized use on its own.