How to get rid of an unknown user from my account

I keep having a particular IP show up watching my content using my login information, even though I have not shared it and I have changed my username, password, PIN and removed all devices ensuring that it requires a re-authentication to the server. I am at a loss as to how this person is still accessing my server.

Which platform runs your server on?

Windows 10 Pro PC

Here is my setup
Comcast ISP wireless/wired router - 24 port un managed switch - connected to that is my PC running Plex and a NAS that has all of my content.

Check the Advanced preference anyway, as mentioned in the linked post.

Have you tried to set a custom domain name for your plex server using a reverse proxy?
Only dabble in reverse proxies if you understand your IP networking very well and are able to secure the setup with custom firewall rules.

I checked the settings under Network as recommended and it is blank. I have not tried setting a custom domain using reverse proxy, nor do I know how to do that. At this point, I’m ready to call my ISP and let them know I have someone (same ISP as me) accessing my account and see if there is anything they can do about it. NOTHING I do keeps this person out, so frustrating.

@FowlerPlexFlix said:
I checked the settings under Network as recommended and it is blank.

I was referring to a setting that is only shown in the registry.

What is your Plex server software version?
The changes introduced in the latest revision should prevent the scenario you are having.

If you have not updated to the latest server version yet, put the following into
Settings - Server - Network - ‘Show Advanced’ - “List of IP addresses and networks that are allowed without auth” = 127.0.0.1/255.255.255.255
Afterwards, restart your plex server. This will require every client to authenticate itself with a plex account.

…I’m ready to call my ISP and let them know I have someone (same ISP as me) accessing my account

How did you determine this fact?

Are you on a ‘shared’ internet connection maybe, where several customers in the same building or block share a common local network (which is pretty lame by your ISP, btw.)

Does the rogue user show up under
Settings - Users - MyPlex
and/or
Settings - Users - Friends
if so, remove him from there.

Do you have DLNA active?

My SW version is 1.1.4.2757

Using PlexPy I see the unknown users IP address and used the Geolocate tool to get the lat/long of the user. Although it is only accurate to 5km, it is showing in my city a few miles from my address. I am not using a shared wifi connection, the rogue user shows up in devices connected via a chrome browser using my login credentials viewing as me. DLNA is not active.

Is your server signed in to your plex.tv account?
Settings - Server - General

Have you verified that the Advanced preference disableRemoteSecurity is not showing up in the Plex branch of the Windows registry?
https://support.plex.tv/hc/en-us/articles/201105343-Advanced-Server-Settings

Server signed in as {my account email address}. I don’t know that the options would work for me, I have a WD DX4000 NAS

@FowlerPlexFlix said:
I don’t know that the options would work for me, I have a WD DX4000 NAS

If it runs Windows, you should be able to at least look at the registry.

Ok. My NAS runs win 2008R2 however, I have Plex installed and running on my PC. I’m not using any of these Ubuntu/Fedora, Synology, QNAP, ReadyNAS so I’m not sure what I would use in the Computer\HKEY_CURRENT_USER\Software\Plex, Inc.\Plex Media Server

@FowlerPlexFlix said:
I have Plex installed and running on my PC.

Quit Plex Server.
Hit the Windows key, type regedit, hit Enter
Navigate to the registry branch Computer\HKEY_CURRENT_USER\Software\Plex, Inc.\Plex Media Server
Look out for a key named disableRemoteSecurity. If it exists, erase it.

The Wiindows Registry you are concerned with is the one the you have Plex Media Server running on.

Ok, I looked for that entry and it does not exist.

@FowlerPlexFlix said:
Ok, I looked for that entry and it does not exist.

Are you running Plex server as a different Windows user than the one you are logged in?
Using the Plex Service Wrapper for instance?
Then HKEY_CURRENT_USER would of course point to the wrong user branch of the registry.

In this case either log into your server with the user account your Plex server runs on,
or just browse the Software key under the other user branches of the Registry. You’ll find them under HKEY_USERS, starting with S and then a long number

I am running the Plex server under my admin account on the PC.

@FowlerPlexFlix said:
I am running the Plex server under my admin account on the PC.

If you are logged in as the user ‘Administrator’ on the same PC, then you must have the Computer\HKEY_CURRENT_USER\Software\Plex, Inc.\Plex Media Server branch in the Windows registry.

If it is not there, then either

  • plex server runs somewhere else
  • plex runs in a virtual machine, like Hyper-V or similar

Did you install plex server into a virtual machine? Did you follow some How-To to install Plex in a virtual machine?

I have that branch in the registry and there is no key named disableRemoteSecurity. It is running on the machine, no VM. If it would help, I could screenshot the registry.