RE: SBS 2003 Guest account



HI,

Thanks for updates.

If you only want them to access the internet, you can refer to my
suggestion below:

1. As SBS standard edition, we have no control on internet, you can just
set proxy on guest computer's IE, then they can access the internet freely,
the other internal sources such RWW and OWA, they will be denied to access.
2. If you have SBS Premium Edition, by default we only allow the user that
belong to Internet user to access the internet, so I have following
suggestion:

A. You can create a new security group called Visitor, make sure that you
use guest permission for this security group, add all the guest user to
this security group then add the Visitor to be the member of Internet user
group,
( To complete this, you can right click the security group, choose
properties, then navigate to "member of " section add the internet user to
the list)

B. You can set a new rule for the security group on ISA to allow the
security group to access internet.

Hope the above information helpful, if you have any further concerns,
please feel free to let me know. I am glad to help you.



Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: SBS 2003 Guest account
| thread-index: AcW+pR1i4/F+/ICeTU6dPzBDx5kG2A==
| X-WBNR-Posting-Host: 67.108.88.52
| From: =?Utf-8?B?TE1J?= <LMI@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <B8875919-B135-430A-AB53-C36832210C8D@xxxxxxxxxxxxx>
<EOj$TulvFHA.780@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: SBS 2003 Guest account
| Date: Wed, 21 Sep 2005 05:08:02 -0700
| Lines: 129
| Message-ID: <7C8436C7-95DF-4566-B979-7F9468FE8C93@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:155207
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Ok sounds good but lets jsut say he wants to come in and use the
internet? I
| am using a proxy server to gain access to the internet but here my issue
i
| want to be abl e to have complete control over the user so that when he
leave
| he can no longer access anything. All i want him to access is the
internet.
|
| ""Charles Yang [MSFT]"" wrote:
|
| >
| > HI,
| >
| > Welcome to SBS newsgroup.
| >
| > Issue description:
| > ==============
| >
| > If I understand correctly, you want to know if you can use guest
account
| > for the visitor who have a laptop and want to join the domain
temporally.
| >
| > Analyzing and suggestions:
| > ====================
| >
| > Generally speaking, your understanding is right, we use guest account
for
| > visitor who wants to temporally use SBS domain. As I know, this account
| > does not have any ability to use RWW OWA also companyweb, he can only
use
| > some domain shared resources. If you have ISA installed on the SBS
2003,
| > you will also be denied to use internet if you use ISA server as your
| > proxy, because this account does not belong to SBS internet users.
| >
| > If you want to give the visitor's permission for only a guest account,
you
| > can follow the steps below:
| >
| > 1. Open Add user wizard on Server managements.
| > 2. Choose do not use template to define users.
| > 3. In next pages select "Guest user"
| > 4. Finish the Wizard
| >
| > Then the user you create will belong to guest group, they will be only
have
| > to limited permission to access the domain internal resources. They do
not
| > have the ability to access the RWW companyweb and OWA.
| >
| > For your convenience, I would like to give you some article refer to
ADUC
| > configuration on Windows 2003, it will help you understand more clearly
| > about the built in user in Windows 2003 domain:
| >
| > Account in Windows 2003
| >
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
| > rHelp/91a98c38-38c5-49dc-83bf-e69d8e1dbbfa.mspx
| >
| > Hope the above information helpful, please feel free to let me know, I
am
| > glad to help you.
| >
| >
| > Best regards,
| >
| > Charles Yang (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: SBS 2003 Guest account
| > | thread-index: AcW95J6l1S/iaYvQTJyz+uca1MFW7Q==
| > | X-WBNR-Posting-Host: 67.108.88.52
| > | From: =?Utf-8?B?TE1J?= <LMI@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: SBS 2003 Guest account
| > | Date: Tue, 20 Sep 2005 06:10:06 -0700
| > | Lines: 6
| > | Message-ID: <B8875919-B135-430A-AB53-C36832210C8D@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:154805
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | I noticed that SBS 2003 creates accoutn for me automatically what i
| > | discovered was a guest account what exactly is this account and the
| > reason
| > | why i'm asking this is because i have certain vistitors that come to
our
| > | offices and present some times they ask me if they can get online
with
| > there
| > | laptop how can i solve this problem and is this what the guest
account
| > is? or
| > | i'm i completly wrong.
| > |
| >
| >
|

.



Relevant Pages

  • Re: Granting Internet access to Guest and Limited Accounts
    ... This problem of granting internet access to a "Guest ... Account" has been bugging me for ages and I suspect it's ... Account, establishing an internet connection, and then ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Allowing Guests access to internet
    ... the guest account can get out on the internet if the ... connection is made thru the LAN, i.e. using the network thru DSL/cable. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: guest account restrictions (IE)
    ... > Just wondering if it is possible to restrict the 'guest' user from ... But I do not want them to use Internet ... Don't use the Guest account for this purpose. ... use the Group Policy Editor to set restrictions on the Visitor ...
    (microsoft.public.windowsxp.general)
  • Re: internet conection
    ... As long as the internet is running via your account, ... the Guest account will be able to access the internet. ... Troubleshooting Windows XP ...
    (microsoft.public.windowsxp.general)
  • RE: SBS ISA Server starts giving out 12202 errors to client
    ... Thank you for posting in SBS newsgroup. ... get error 12202 when he access internet. ... then click "ISA Server Management". ... recreate the user account to see how thing goes. ...
    (microsoft.public.windows.server.sbs)