Guest Steven Sinclair Posted August 19, 2008 Posted August 19, 2008 First, I apologize for cross-posting, but didn't realize I was in the "Media Center" forum before I hit post. So, here it is... ---------- Windows XP Home SP2 Broadband Internet I'm setting up a Windows XP Home computer. I have several users on already and all is working just fine and dandy. My issue is this...I would like to enable the Guest account, but can't figure out how to get internet working under that account. So, I figured I'd just create a new user with admin access and simply restrict that individual user to suit my needs. However, as there is no group policy editor, I can't figure out how to do that. Any ideas? Thanx.
Guest Malke Posted August 19, 2008 Posted August 19, 2008 Re: User Rights... Steven Sinclair wrote: > First, I apologize for cross-posting, but didn't realize I was in the > "Media Center" forum before I hit post. So, here it is... > > ---------- > > Windows XP Home SP2 > Broadband Internet > > I'm setting up a Windows XP Home computer. I have several users on already > and all is working just fine and dandy. My issue is this...I would like to > enable the Guest account, but can't figure out how to get internet working > under that account. So, I figured I'd just create a new user with admin > access and simply restrict that individual user to suit my needs. However, > as there is no group policy editor, I can't figure out how to do that. Crossposting is fine but it looks like you multiposted, which is not. Explanation: http://en.wikipedia.org/wiki/Crossposting - crossposting http://www.blakjak.demon.co.uk/mul_crss.htm - multiposting To answer your question, do not enable the Guest account you see in the User Accounts applet in Control Panel. The Guest account is a special system account, not one meant for when you are feeling hospitable. It is disabled by default in Windows XP, Vista, Linux, Unix, and OS X for a reason. From TechNet: "The Guest account is intended for users who require temporary access to the system. However, if this account is enabled, a security risk may exist because an unauthorized user could gain anonymous access to the system through this account." http://technet.microsoft.com/en-us/library/bb418978(TechNet.10).aspx Instead, create a Limited user account and call it something like "Visitors". If you can't get Internet working under the Limited account, try: Registry settings to check from Kelly Theriot for the problem that limited users can't get online. Seems to be connected with malware, but check these entries: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings] ProxyEnable set to 0 ProxyServer verify that the IP:Port is valid [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\ControlPanel] Connection Settings Connwiz Admin Lock Set either both to 0 or delete. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoInternetOpenWith NoWebServices Set either both to 0 or delete. Note: NoPublishingWizard and NoOnlinePrintsWizard could also be listed [HKEY_CURRENT_USER\Software\Policies\Microsoft\InternetManagement] RestrictCommunication Set to 0 or delete There is no Group Policy Editor in XP Home. If you decide to use an Administrator account, you can use Doug Knox's Security Console or the MS SteadyState program to set the restrictions the way you want. SteadyState supports Vista now. http://www.dougknox.com http://www.microsoft.com/windowsxp/sharedaccess/default.mspx More on SteadyState: http://aumha.net/viewtopic.php?t=27570 Malke -- MS-MVP Elephant Boy Computers - Don't Panic! FAQ - http://www.elephantboycomputers.com/#FAQ
Recommended Posts