Re: preventing Guest use of regedit

From: GDV (GDV_at_discussions.microsoft.com)
Date: 02/25/05 

Date: Fri, 25 Feb 2005 10:29:09 -0800

I'm wondering if I've run into a similar problem. Any changes that I make
using the Group Policy editor, such as removing "Run" or Help" from the Start
menu, removing the "Network" icon from the desktop, etc. are done for all
users (including the built-in administrator account), but not for the
built-in Guest account. Nothing changes in the Guest account. I would like to
use this account for guests, and I would like to be able to lock it down in
the same way as any other user account (excepting the administrator, of
course). Is there something extra that I need to do here in order to apply
the new policies to the Guest account? I am familiar with the procedure
described in a Knowledge Base article about restoring full privileges to the
administrator account after locking down everything else (I can't remember
the number). I am running Windows 2000/Service Pack 4 on a stand-alone
(non-networked) computer.

"Roger Abell" wrote:

> Use NTFS permissions on the executable.
>
> Note that when the Guest account is used for log in at
> the console it is a Users member, and so no different
> from any other limited account (other than also being
> the Guest account).
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> "mikeh" <mikeh@discussions.microsoft.com> wrote in message
> news:0196427D-910F-415E-94B4-FD42830D9A35@microsoft.com...
> > I'm having trouble preventing a user who is logged into the Guest account
> on
> > my WinXP Pro SP2 machine from running regedit. Enabling "Prevent access
> to
> > registry editing tools" with gpedit.msc doesn't seem to do it (it does
> seem
> > to prevent other users from running regedit, though). Please help me
> figure
> > out how to do this if it is possible.
>
>
>

Relevant Pages

  • Re: Guest Account in XP
    ... can be changed back to guest account activated. ... withOUT an administrator account or password. ... For instance, with the guest account turned off, if it's Home Edition, ... "freedomfromjack" wrote: ...
    (microsoft.public.windowsxp.newusers)
  • Re: What laws did PC repair co. break by hacking my laptop?
    ... Profile was set with a password, it was the only Administrator account, and ... You need a new tame "expert" if they told you a guest account can be ... As others have said it is trivially easy to do so. ... considerable financial compensation to make up for this violation). ...
    (uk.legal)
  • Re: There isnt Guest. Re: How to Check? Re: Logs off after choosing a built-in guest account
    ... Should the Guest account be in a built-in Guest group? ... > MS MVP (Windows Platform), MCSE, MCDBA, MCT ... >>> Roger Abell ...
    (microsoft.public.windowsxp.security_admin)
  • winamp not available on xp home guest account
    ... Administrator account? ... >I've enabled the guest account on my xp home edition ... >as a digital jukebox with my stereo) I have winamp 5 ... >winamp does not appear in the start menu and when I try ...
    (microsoft.public.windowsxp.general)
  • Re: How to log on without username & password ?
    ... >> something is typed into the username field. ... > the Guest Account turned on, it will ask for an input. ... I removed all the accounts, except one, the administrator account, ... When I try to log on to the server, it still asks me for the username ...
    (microsoft.public.windowsxp.help_and_support)
Loading