guest accounts and installing software

[Guest Luis Ortega]

If I set up a guest account in xp, will the user be able to install

software, either from an internet download or a software disk?

Thanks for any advice.

[Guest sgopus]

RE: guest accounts and installing software

 

Depends on the level of authority you give him, if you left it at default

levels, most likely the answer would be no!

it would be best to disable the guest account and create a custom level one

for visitors, as the guest account is a security risk.

 

"Luis Ortega" wrote:

> If I set up a guest account in xp, will the user be able to install

> software, either from an internet download or a software disk?

> Thanks for any advice.

>

[Guest Malke]

Re: guest accounts and installing software

 

Luis Ortega wrote:

> If I set up a guest account in xp, will the user be able to install

> software, either from an internet download or a software disk?

> Thanks for any advice.

 

Do not use the Guest account you see in the User Accounts applet in Control

Panel. The Guest account is a special system account, not one meant for

when you are feeling hospitable. It is disabled by default in Windows XP,

Vista, Linux, Unix, and OS X for a reason.

 

From TechNet:

 

"The Guest account is intended for users who require temporary access to the

system. However, if this account is enabled, a security risk may exist

because an unauthorized user could gain anonymous access to the system

through this account."

 

http://technet.microsoft.com/en-us/library/bb418978(TechNet.10).aspx

 

So if you enabled Guest, disable it now and create a Standard/Limited

(Vista, XP Pro/XP Home) for your visitors. Call the new user account

something like "Visitor".

 

If you have XP Home, you don't have the built-in ability to create

fine-grained limitations if you want them on this account, so use either

MVP Doug Knox's Security Console or the MS SteadyState program to set the

restrictions the way you want. SteadyState supports Vista now.

 

http://www.dougknox.com

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx

More on SteadyState: http://aumha.net/viewtopic.php?t=27570

 

If you have XP Pro, Media Center, Vista Business or Vista Ultimate, you can

use Group Policy to set restrictions (gpedit.msc). Be very careful using

the Group Policy editor; it is completely possible to lock yourself out.

Questions about group policy should be posted here:

 

microsoft.public.windows.group_policy

 

Malke

--

MS-MVP

Elephant Boy Computers - Don't Panic!

FAQ - http://www.elephantboycomputers.com/#FAQ