Re: Deny Software installation

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Michael Solomon \(MS-MVP Windows Shell/User\) (user_at_#notme.com)
Date: 03/10/04 

Date: Wed, 10 Mar 2004 15:37:09 -0800

The way to do it is exactly what you've done except you don't give out your
logon. That's how it is done in XP and if you give out your admin logon,
you essentially defeat the security of using the guest account.

In other words, it is already turned off in the Guest account. When they
use your logon, they are bypassing the Guest account and using information
you've apparently given them to do so. Even if you had XP Pro, there's no
rule in Group Policy editor you could create to do what you are asking as it
would essentially turn off admin rights.

Now that you've given up the security you can either change your login
information or you can get a third party application to handle this because
you've compromised the security and the means of handling what you wish to
prevent. 

-- 
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/
"John B" <barnesjtsl@yahoo.com> wrote in message 
news:uRE6tJvBEHA.2380@TK2MSFTNGP10.phx.gbl...
> XP Pro
>
> Can anyone tell me how to "Disallow" software installation for the "Guest"
> account?
>
> Right now the "Guest" account can install software, they just get the
> warning box "install program as other user" and they can go ahead and
> install the application without logging in as an "Administrator".
>
> I want to setup the machine so NO software period can be installed by the
> "Guest" account, weather they know an administrator logon or not.
>
> Thanks,
>
> John Barnes
> jbarnes@ci.mcminnville.or.us
>
>

Relevant Pages

  • Re: Deny Software installation
    ... That's how it is done in XP and if you give out your admin logon, ... it is already turned off in the Guest account. ... Now that you've given up the security you can either change your login ... > Right now the "Guest" account can install software, ...
    (microsoft.public.windowsxp.basics)
  • RE: Event ID 529
    ... ISA is part of the Premium install. ... is that you already have a good security solution in place. ... Logon Failure: ... Caller User Name: MYSVRNAME$ ...
    (microsoft.public.windows.server.sbs)
  • Re: Thousands of 537 Events in Security Log
    ... I managed to get the Messaging Security Agent to install by not installing ... I have configured proxy settings for both Update and Tracking and Web ... An error occurred during logon ...
    (microsoft.public.windows.server.sbs)
  • RE: Windows XP Guest Account.
    ... Look in the Event Viewer - Security log. ... Subject: Windows XP Guest Account. ... connected to the internet, first thing I install XP and restart the system, ...
    (Incidents)
  • Re: local policy of this system does not permit you to logon interactively
    ... The link below may help, but requires network access, putting your hard ... or doing a paralell install. ... > security on my personal system through the ... > How can I override the logon or bypass it so I can correct ...
    (microsoft.public.win2000.security)