Guest account

Hi all
how do i set restrictions on my guest account? If it is not possible
is there any event viewer/log that i can set on the guest account so a
to monitor it. Thanks

--
xplod

"xplod" <> wrote in message
news:...
>
> Hi all,
> how do i set restrictions on my guest account? If it is not possible,
> is there any event viewer/log that i can set on the guest account so as
> to monitor it. Thanks!

The guest account should be turned OFF.
If you want to let people other than yourself use the machine, create a
Standard User account and call it "Visitor" or similar...



--
Asking a question?
Please tell us the version of the application you are asking about,
your OS, Service Pack level
and the FULL contents of any error message(s)

xplod wrote:

>
> Hi all,
> how do i set restrictions on my guest account? If it is not possible,
> is there any event viewer/log that i can set on the guest account so as
> to monitor it. Thanks!

To elaborate somewhat on Gordon's answer:

Do not use the Guest account you see in the User Accounts applet in Control
Panel. The Guest account is a special system account, not one meant for
when you are feeling hospitable. It is disabled by default in Windows XP,
Vista, Linux, Unix, and OS X for a reason.

From TechNet:

"The Guest account is intended for users who require temporary access to the
system. However, if this account is enabled, a security risk may exist
because an unauthorized user could gain anonymous access to the system
through this account."

http://technet.microsoft.com/en-us/l...chNet.10).aspx

So if you enabled Guest, disable it now and create a Standard/Limited
(Vista, XP Pro/XP Home) for your visitors. Call the new user account
something like "Visitor".

If you have XP Home or Vista Basic/Home Premium, you don't have the built-in
ability to create fine-grained limitations if you want them on this
account, so use either MVP Doug Knox's Security Console or the MS
SteadyState program to set the restrictions the way you want. SteadyState
supports Vista now.

http://www.dougknox.com
http://www.microsoft.com/windowsxp/s...s/default.mspx
More on SteadyState: http://aumha.net/viewtopic.php?t=27570

If you have XP Pro, Media Center, Vista Business or Vista Ultimate, you can
use Group Policy to set restrictions (gpedit.msc). Be very careful using
the Group Policy editor; it is completely possible to lock yourself out.
Questions about group policy should be posted here:

microsoft.public.windows.group_policy

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

"Malke" <> wrote in message
news:%...
> xplod wrote:
>
>>
>> Hi all,
>> how do i set restrictions on my guest account? If it is not possible,
>> is there any event viewer/log that i can set on the guest account so as
>> to monitor it. Thanks!
>
> To elaborate somewhat on Gordon's answer:
>
> Do not use the Guest account you see in the User Accounts applet in
> Control
> Panel. The Guest account is a special system account, not one meant for
> when you are feeling hospitable. It is disabled by default in Windows XP,
> Vista, Linux, Unix, and OS X for a reason.
>
> From TechNet:
>
> "The Guest account is intended for users who require temporary access to
> the
> system. However, if this account is enabled, a security risk may exist
> because an unauthorized user could gain anonymous access to the system
> through this account."
>
> http://technet.microsoft.com/en-us/l...chNet.10).aspx
>
> So if you enabled Guest, disable it now and create a Standard/Limited
> (Vista, XP Pro/XP Home) for your visitors. Call the new user account
> something like "Visitor".
>
> If you have XP Home or Vista Basic/Home Premium, you don't have the
> built-in
> ability to create fine-grained limitations if you want them on this
> account, so use either MVP Doug Knox's Security Console or the MS
> SteadyState program to set the restrictions the way you want. SteadyState
> supports Vista now.
>
> http://www.dougknox.com
> http://www.microsoft.com/windowsxp/s...s/default.mspx
> More on SteadyState: http://aumha.net/viewtopic.php?t=27570
>
> If you have XP Pro, Media Center, Vista Business or Vista Ultimate, you
> can
> use Group Policy to set restrictions (gpedit.msc). Be very careful using
> the Group Policy editor; it is completely possible to lock yourself out.
> Questions about group policy should be posted here:
>
> microsoft.public.windows.group_policy
>


Thanks for the elaboration!
;-)

--
Asking a question?
Please tell us the version of the application you are asking about,
your OS, Service Pack level
and the FULL contents of any error message(s)

On Fri, 05 Dec 2008 05:10:16 -0800, Malke <>
wrote:

>Do not use the Guest account you see in the User Accounts applet in Control
>Panel. The Guest account is a special system account, not one meant for
>when you are feeling hospitable. It is disabled by default in Windows XP,
>Vista, Linux, Unix, and OS X for a reason.
>
>From TechNet:
>
>"The Guest account is intended for users who require temporary access to the
>system. However, if this account is enabled, a security risk may exist
>because an unauthorized user could gain anonymous access to the system
>through this account."

In other words: "The Guest account is created by MS to support Guests
but it's too dangerous so don't let Guests use it".

It sort of makes one wonder why there is a guest account :-)

"+Bob+" <> wrote in message
news:...
> On Fri, 05 Dec 2008 05:10:16 -0800, Malke <>
> wrote:
>
>>Do not use the Guest account you see in the User Accounts applet in
>>Control
>>Panel. The Guest account is a special system account, not one meant for
>>when you are feeling hospitable. It is disabled by default in Windows XP,
>>Vista, Linux, Unix, and OS X for a reason.
>>
>>From TechNet:
>>
>>"The Guest account is intended for users who require temporary access to
>>the
>>system. However, if this account is enabled, a security risk may exist
>>because an unauthorized user could gain anonymous access to the system
>>through this account."
>
> In other words: "The Guest account is created by MS to support Guests
> but it's too dangerous so don't let Guests use it".
>
> It sort of makes one wonder why there is a guest account :-)
>
>


It's used for networking in the Home versions of Windows XP and Vista....

--
Asking a question?
Please tell us the version of the application you are asking about,
your OS, Service Pack level
and the FULL contents of any error message(s)

On Fri, 5 Dec 2008 19:23:00 -0000, "Gordon"
<> wrote:

>It's used for networking in the Home versions of Windows XP and Vista....

You mean it's a cheap hack around the IPC$account issue?

I don't ever share anything without a use account, so I am unawares.

"+Bob+" <> wrote in message
news:...
> On Fri, 5 Dec 2008 19:23:00 -0000, "Gordon"
> <> wrote:
>
>>It's used for networking in the Home versions of Windows XP and Vista....
>
> You mean it's a cheap hack around the IPC$account issue?
>
> I don't ever share anything without a use account, so I am unawares.


In the Home editions the Security tab on files and folders is only available
when logged in as The Administrator....

--
Asking a question?
Please tell us the version of the application you are asking about,
your OS, Service Pack level
and the FULL contents of any error message(s)

+Bob+ wrote:

> On Fri, 5 Dec 2008 19:23:00 -0000, "Gordon"
> <> wrote:
>
>>It's used for networking in the Home versions of Windows XP and Vista....
>
> You mean it's a cheap hack around the IPC$account issue?
>
> I don't ever share anything without a use account, so I am unawares.

No, +Bob+, the Guest account is not a "cheap hack" nor is it "created by MS
to support Guests but it's too dangerous so don't let Guests use it". These
comments show an ignorance of operating system fundamentals on your part.

The Guest account is found in all multi-user operating systems. Mac OS X,
Linux, and Unix all are structured the same way as XP and Vista when it
comes to Guest.

If you want to get a deeper understanding of operating systems, there are
innumerable whitepapers on MS TechNet. If you are a person who prefers
books, then spend some time browsing Amazon for technical books. And of
course there's always The Great Google.

BTW, if you don't like Windows there are plenty of other operating systems
you can try. I love my OS X and this old SUSE 10.1 works very well for me.
The new Fedora 10 is also very slick.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

On Sat, 06 Dec 2008 05:40:53 -0800, Malke <>
wrote:

>+Bob+ wrote:
>
>> On Fri, 5 Dec 2008 19:23:00 -0000, "Gordon"
>> <> wrote:
>>
>>>It's used for networking in the Home versions of Windows XP and Vista....
>>
>> You mean it's a cheap hack around the IPC$account issue?
>>
>> I don't ever share anything without a use account, so I am unawares.
>
>No, +Bob+, the Guest account is not a "cheap hack" nor is it "created by MS
>to support Guests but it's too dangerous so don't let Guests use it". These
>comments show an ignorance of operating system fundamentals on your part.

Says you.

>The Guest account is found in all multi-user operating systems. Mac OS X,
>Linux, and Unix all are structured the same way as XP and Vista when it
>comes to Guest.

MS does not implement this architectural feature like other OS's.
Their convoluted security implementation is a constant PITA.

>BTW, if you don't like Windows there are plenty of other operating systems
>you can try. I love my OS X and this old SUSE 10.1 works very well for me.
>The new Fedora 10 is also very slick.

I don't dislike MS-windows. Windows has some good features, and some
not so good features. The security "architecture" (note the quotes) is
not among the better features.

I do dislike Vista. UAC is a hack. File security in Vista is a hack.
Vista's improved security is mostly band aids on a broken security
model.