setting up guest accounts

  • Thread starter Thread starter Luis Ortega
  • Start date Start date
L

Luis Ortega

If I set up a guest account in xp, will the user be able to install
software, either from an internet download or a software disk? Is there
anything special to set besides activating the guest account?
Thanks for any advice.
 
Luis Ortega said:
If I set up a guest account in xp, will the user be able to install
software, either from an internet download or a software disk? Is there
anything special to set besides activating the guest account?
Thanks for any advice.
Click to expand...
Doesn't XP already have an account called Guest?
This account is primarily used to map shared files and folders. While the
guest account might be able to do what you mentioned, using it for this
purpose makes it impossible to determine who actually did the deed.

Why can you not use the built in administrator account or one of your own
creation which is a member of the administrators group? My preference is
the later method for the reason that I gave for the question about the guest
account.
Jim
 
Luis said:
If I set up a guest account in xp, will the user be able to install
software, either from an internet download or a software disk? Is there
anything special to set besides activating the guest account?
Thanks for any advice.
Click to expand...

Do not use the Guest account you see in the User Accounts applet in Control
Panel. The Guest account is a special system account, not one meant for
when you are feeling hospitable. It is disabled by default in Windows XP,
Vista, Linux, Unix, and OS X for a reason.

From TechNet:

"The Guest account is intended for users who require temporary access to the
system. However, if this account is enabled, a security risk may exist
because an unauthorized user could gain anonymous access to the system
through this account."

http://technet.microsoft.com/en-us/library/bb418978(TechNet.10).aspx

So if you enabled Guest, disable it now and create a Standard/Limited
(Vista, XP Pro/XP Home) for your visitors. Call the new user account
something like "Visitor".

If you have XP Home or Vista Home Basic/Premium, you don't have the built-in
ability to create fine-grained limitations if you want them on this
account, so use either MVP Doug Knox's Security Console for XP or the MS
SteadyState program to set the restrictions the way you want. SteadyState
supports Vista now.

http://www.dougknox.com
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx
More on SteadyState: http://aumha.net/viewtopic.php?t=27570

If you have XP Pro, Media Center, Vista Business or Vista Ultimate, you can
use Group Policy to set restrictions (gpedit.msc). Be very careful using
the Group Policy editor; it is completely possible to lock yourself out.
Questions about group policy should be posted here:

microsoft.public.windows.group_policy

Malke
 
Back
Top