Guest account: how enable network access

  • Thread starter Thread starter FUBARinSFO
  • Start date Start date
F

FUBARinSFO

Hi:

The XP default Guest account does not appear to enable workgroup
network access to other workstations on the LAN. As a result, the
Guest can't print to a LAN printer. (Nor can it access any other
shared LAN resources)

This doesn't appear to be an insurmountable problem, but I have been
unable to find a fix. I realize that a separate user account with
limited permissions could be set up to do the same thing. I also
realize that it may be suberting the "by design" intent of Guest to
expand its capabilities this way.

From the Administrator account on this workstation, all thee network
workstations can be pinged via IP OK (e.g., ping 192.168.1.101), and
'net view' shows their names (three workstations, including the local
one).

But from the Guest account only ping works; the browse using 'net
view' generates Error 5 'Access denied error' There are not
workstations listed the Windows Explorer view of 'My Network Places'
under the <workgroup> name.

I've used the Group Policy editor, explored all settings known or
understood by me in Users and Groups, Windows firewall enables printer
and file sharing, but still cannot account for Guest permissions. I
set up a fresh 'user' account, with default limited permissions, and
LAN access works as expected, allowing access to shared network
resources.

This appears to be a problem with a long heritage short on solutions,
if my recent browsing is any indication. Thank you in advance for
your help.

-- Roy Zider
 
The guest account is intended for use by someone who has no user account
on the computer. There is no password for the guest account, so the user
can log on quickly to check e-mail or browse the Internet. A user logged
on to the guest account:

* Cannot install software or hardware, but can access programs that have
already been installed on the computer.

* Cannot change the guest account type.

* Can change the guest account picture.

hth
 
You should create a limited account.

The limited account is intended for someone who should be prohibited
from changing most computer settings and deleting important files. A
user with a limited account:

* Cannot install software or hardware, but can access programs that have
already been installed on the computer.

* Can change his or her account picture and can also create, change, or
delete his or her password.

* Cannot change his or her account name or account type. A user with a
computer administrator account must make these kinds of changes.

hth
 
Yes, I understand that, as I tried to say in my posting.

I am interested in giving the Guest account network access. How do I
do that?

-- Roy Zider
 
FUBARinSFO said:
Yes, I understand that, as I tried to say in my posting.

I am interested in giving the Guest account network access. How do I
do that?

-- Roy Zider
Click to expand...


You can't. The whole purpose of the guest account is to grant a
temporary access to your systems with very limited rights. It can not
be changed in any way except to turn it on because by default it is Off.
 
Tester:

"Can't" is a lot stronger than "don't". Do you happen to have any
authoritative references for this assertion?

The Microsoft article on the Guest account in Windows XP Professional
does not indicate this; if anything, it appears to indicate that
network resources may be available

Description of the Guest account in Windows XP

http://support.microsoft.com/kb/300489

In the Guest logon account I am using right now, I have in fact been
able to install programs, contrary to this KB article.

-- Roy Zider
 
Back
Top