Guest Account has same rights as Administrator account?

W

Wicked00

Guest
I activated the guest account, but the guest account still lets me do just about everything as the Administrator account. I was hoping it would be very limited in options. Is there something I have to check off, or turn on? Where can I adjust each user's rights?
 

Lonman

Bleh!
Joined
2 Dec 2001
Messages
2,642
If you're not in the habit of having 'guests' use your computer, just disable the account.

If you're running an NTFS volume, then you can further define user restrictions by Opening Windows Explorer> Tools> Folder Options> 'view' tab. Go in and untick 'simple file sharing.'

Then you can right click on a drive/folder/file> Sharing and Security> 'security' tab, and set your restrictions accordingly for eash user account/group.
 
C

chooch

Guest
You can also set the restriction of the account within the Local Security setting in the Administrative tools in Control Panel. Click on Security Settings\Local Policies\User Rights Assignment. In there you could specify what exactly is it that you would like to allow the Guest account to do, also you might want to check and make sure the guest account is only part of the guest account group from within Computer Managment or vial the User Account in Control Panel, click on the Guest Account, click on change my account type and make sure it is set to limited.
 
D

Druce

Guest
go to start - run - type "lusrmgr.msc" (without quotes) - then you can edit what groups and permissions each account has.. this a bit more powerful than the gui interface thru the admin tools

hope this helps
 
C

chooch

Guest
lusrmgr.msc is a snap-in that is already added to the Computer Management console
 
D

Druce

Guest
doh! i knew that too... now i feel dumb.. lol

yea, he's right... listen to him... all the icon in the control panel is - is a shortcut to the snap in...

boy i feel stooopid now....

:mad:
 
C

chooch

Guest
Druce,

That was just an FYI not to make anyone feel stupid, i apologize if i did.
 
D

Druce

Guest
naa, i am just a silly person...

thanks for keeping me honest.. lol

:D
 
W

Wicked00

Guest
Ok, here's what I would like to do... please tell me how (if possible)

I'd like the guest account to only have access to the internet and that's it. Nothing else. My brother uses my computer and he somehow always manages to delete some files that I need, so how can I go about either making a name, or using the guest account to only have rights to view websites?
 
D

Druce

Guest
i can look this up when i get home and give you an answer... hope you can wait till monday night ;)
 
D

Druce

Guest
A user right is authorization to perform an operation that affects an entire computer. (A permission, by contrast, is authorization to perform an operation on a specific object—such as a file or a printer—on a computer.)For each user right, you can specify which user accounts and groups have the user right. To review or set user rights, in Group Policy (Gpedit.msc) navigate to Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment. Then double-click a user right to view or change the list of users and groups.

To review or change the local setting for a user right, double-click the user right in User Rights Assignment.
tip - Use the Local Security Settings console
--------------------------------------------------------------------------------
The Local Security Settings console provides a shorter path to User Rights Assignment, so it’s useful when you’re not setting other policies, such as the ones in the Administrative Templates folders. To open Local Security Settings, double-click Local Security Policy in the Administrative Tools folder or type secpol.msc at a command prompt.

Ten of the user rights—Access This Computer From The Network, Allow Logon Through Terminal Services, Log On As A Batch Job, Log On As A Service, Log On Locally, and their corresponding "Deny" user rights—are known more precisely as logon rights. They control how users are allowed to access the computer—whether from the keyboard ("locally") or through a network connection, or whether as a service or as a batch facility (such as Task Scheduler). You can use these logon rights (in particular, Log On Locally and Deny Logon Locally) to control who can log on to your computer. By default, Log On Locally is granted to the local Guest account and members of the Administrators, Backup Operators, Power Users, and Users groups. If you want to prevent certain users from logging on at the keyboard (but still allow them to connect via the network, for example), create a group, add those user accounts to it, and then assign the Deny Logon Locally user right to the new group. Like deny permissions, deny logon rights take precedence over allow logon rights, so if a user is a member of a group that is allowed to log on (such as Power Users) and a group that is not (such as the one described in the previous sentence), the user will not be allowed to log on. (Such users are rebuffed with an error message after they type their user name and password in the Log On To Windows dialog box.)

hope this will shed a little light on it all
 
D

DAZZ

Guest
umm i dont really get what ur saying, i have the same problem, but not getting what u guys are saying
 

Members online

No members online now.

Latest forum posts

Latest profile posts

Electronic Punk wrote on Sazar's profile.
Rest in peace my friend, been trying to find you and finally did in the worst way imaginable.
Terrahertz wrote on Electronic Punk's profile.
Yo fellas!
Electronic Punk wrote on Sazar's profile.
Where are you buddy?
Perris Calderon wrote on Electronic Punk's profile.
Hey EP! All good with me, applying for Microsoft MVP right now, should have done this a while ago.

Notifications don't work, I only found your response by coming back to hunt up some threads, if you want, give me your email address so we can keep in touch easier!
Perris Calderon wrote on Electronic Punk's profile.
EP, glad to see you come back and tidy up...did want to ask a one day favor, I want to enhance my resume , was hoping you could make me administrator for a day, if so, take me right off since I won't be here to do anything, and don't know the slightest about the board, but it would be nice putting "served administrator osnn", if can do, THANKS

Been running around Quora lately, luv it there!

Forum statistics

Threads
61,995
Messages
673,389
Members
5,585
Latest member
LucyHennessy