Restricting rights of guest account

June 1, 2005 at 07:17:08
Specs: XP Pro, N/A

I would like to set up a guest account for anyone to use, but I would like to disable some features like downloading, installing new programs and accessing network drives and other folders. Is there a way to do this with Windows or is there a program out there that allows these types of modifications?


See More: Restricting rights of guest account

Report •


#1
June 1, 2005 at 07:30:35

Yes there's a third party program that does all of that plus more. The one I have been using for years is Tweaki...for Power Users by JerMar Software. There's one disadvantage and that is this utility is for system-wide implementation rather than per user

Alternatively you have XP Pro so you can do it through GPEDIT.

http://www.jermar.com/tweaki.htm

i_XpUser


Report •

#2
June 1, 2005 at 07:31:48

The intended use of the built-in Guest account is pretty much what you want...

Report •

#3
June 1, 2005 at 07:37:01

Hi Jennifer,

With all due respect, I diagreee with your statement. The following came from XP Help & Support:

The guest account is intended for use by someone who has no user account on the computer. There is no password for the guest account, so the user can log on quickly to check e-mail or browse the Internet. A user logged on to the guest account:

- Cannot install software or hardware, but can access applications that have already been installed on the computer.

- Cannot change the guest account type.

- Can change the guest account picture.

In other words, the guest account is inviting trouble. One example is you can access anything from the computer if you type c:\ in IE address bar.

i_XpUser


Report •

Related Solutions

#4
June 1, 2005 at 07:47:33

That program does have the options I'm looking for but unfortunately I am trying to limit these settings only in the guest account. I'm not sure I know how to do this through GPEDIT.

I looked over some of the settings through the Local Security Policy in Administrative Tools but I didn't see anything that I was sure would change what I needed. Is this the wrong place to look?


Report •

#5
June 1, 2005 at 07:53:18

I've just reviewed the GPEDIT features and it doesn't seem to support guest account (unless I miss reading something).

i_XpUser


Report •

#6
June 1, 2005 at 08:02:40

There has to be a way...!

Report •

#7
June 1, 2005 at 08:07:46

There has to be a way...!

If you mean thrugh the Group Policy Editor there's nothing meaningful for Guest Accounts.


i_XpUser


Report •

#8
June 1, 2005 at 08:29:25

No, I mean overall. I know I'm not the only one who needs this type of configuration. I'm just suprised there's not a wide-known way to do it. Frustrating, really!!!


Report •

#9
June 1, 2005 at 08:41:53

This could help ...

How can I prevent users from downloading files from the Internet?

i_XpUser


Report •

#10
June 1, 2005 at 15:44:51

is this pc on a network or just a stand alone pc?

Report •

#11
June 1, 2005 at 16:03:31

It's on a network with anywhere from 1 to 4 other computers.

Report •

#12
June 1, 2005 at 16:39:32

is the network a peer to peer or is there a NT or Novell tree? If it is on a domain, set the permissions from the server and implement policies as global policies take precedence over local

Report •

#13
June 2, 2005 at 08:05:47

It's just on a simple home network with one Belkin router.

Report •

#14
June 2, 2005 at 14:49:24

Maybe make a real user account with a autologin that has a been secured by local policies?



Report •

#15
June 2, 2005 at 16:28:51

Well, I can't find a way to limit one user account without limiting all the others. For example, I think I've found where I can disable downloading from the internet, but it disables it for my administrator account as well. How could I disable downloading for just one account?

Report •


Ask Question