Guests: Please Help

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Hi everyone;

Is there anyone who can tell me about the restrictions of the 'Guests" user
group on Windows XP Professional? I have set up some user accounts as
members of the Guests group on my computer (not on a domain) but their
functionality is severely limited. The Users have their own account and are
members only of the 'Guests' group.

My intention was to use the 'Guests' group to block these Users from
accessign certain programs and writing in certain folders. This I have
accomplished. However, these Users have further restrictions which I do not
understand. For instance, they cannot use MSN display pictures or open
Microsoft Excel 2003 files. I checked their profile folder (C:\Documents and
settings\USER\) and set the following permissions which apply to this folder
and all subfolders:
-Allow: Read, Write, Execute, Take Ownership
-DENY: Delete, Delete subfolders, Change Permissions

I've also noticed that their 'Favorites' are not stored in their profile
folder, it is stored elsewhere. (They have a 'favorites' folder, but it
contains only the default links).

With respect to the MSN Messenger error, I checked their C:\Documents and
Settings\USER\Application Data\Microsoft\ folder and they do not even have an
MSN Messenger folder.

Can someone please tell me what is going on or where I can learn more about
the Guests group?

Thank you very much.


....C_Guy

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

THe Guest user account have no access to system files..which means if they
access a program in system files they will be denied...guest accounts are
mainly for temporary people to get on and do simple things like internet
without needing to sign in from someone elses password. Do you have win xp
pro or home? This can tell me what to tell you to do

"C_Guy" wrote:

> Hi everyone;
>
> Is there anyone who can tell me about the restrictions of the 'Guests" user
> group on Windows XP Professional? I have set up some user accounts as
> members of the Guests group on my computer (not on a domain) but their
> functionality is severely limited. The Users have their own account and are
> members only of the 'Guests' group.
>
> My intention was to use the 'Guests' group to block these Users from
> accessign certain programs and writing in certain folders. This I have
> accomplished. However, these Users have further restrictions which I do not
> understand. For instance, they cannot use MSN display pictures or open
> Microsoft Excel 2003 files. I checked their profile folder (C:\Documents and
> settings\USER\) and set the following permissions which apply to this folder
> and all subfolders:
> -Allow: Read, Write, Execute, Take Ownership
> -DENY: Delete, Delete subfolders, Change Permissions
>
> I've also noticed that their 'Favorites' are not stored in their profile
> folder, it is stored elsewhere. (They have a 'favorites' folder, but it
> contains only the default links).
>
> With respect to the MSN Messenger error, I checked their C:\Documents and
> Settings\USER\Application Data\Microsoft\ folder and they do not even have an
> MSN Messenger folder.
>
> Can someone please tell me what is going on or where I can learn more about
> the Guests group?
>
> Thank you very much.
>
>
> ...C_Guy