Authenticated Users & Interactive groups

  • Thread starter Thread starter andrewbb
  • Start date Start date
A

andrewbb

It appears those are BUILTIN Groups. Is there a way to create a User
or a Group that ONLY includes those two groups? That would seem to
create a synthetic Guest account, correct?

Is this possible?

In case you're wondering why: I'd like to create a User that is not a
member of Guests or Users, but can log into the computer interactively
with a profile. The Users group has too much permission and the
Guests group profiles are deleted when they log out. So basically I
want a Guests account with a permanent profile. How?
 
It appears those are BUILTIN Groups. Is there a way to create a User
or a Group that ONLY includes those two groups? That would seem to
create a synthetic Guest account, correct?

Is this possible?

In case you're wondering why: I'd like to create a User that is not a
member of Guests or Users, but can log into the computer interactively
with a profile. The Users group has too much permission and the
Guests group profiles are deleted when they log out. So basically I
want a Guests account with a permanent profile. How?
Click to expand...

Explicit "deny" takes precedence over inherited "permit". So you could
create a user that is a member of the "Users" group and also a member of
a group of your creation. You can explicitly deny permissions to that
group. You can also put that user in an OU and define a very restrictive
set of policies with limited user rights, etc.

....kurt
 
Explicit "deny" takes precedence over inherited "permit". So you could
create a user that is a member of the "Users" group and also a member of
a group of your creation. You can explicitly deny permissions to that
group. You can also put that user in an OU and define a very restrictive
set of policies with limited user rights, etc.

...kurt
Click to expand...

Thanks Kurt. That's exactly what I need.
 
Back
Top