Guest account, full file access

[shrimply]

I have had a guest account set up for ages now, its so other people in my house can use the laptop if I'm away and I occasionally have friends at uni that need internet access etc.

 

I though that this meant they wouldn't be able to access or be bothered by any of my stuff, apparently not. Just been playing around with the guest account to make it more usable, updating some stuff and disabling others and have realised the account has complete access to all my files, now call me stupid but I thought the whole point of a guest account was that it didn't.

 

I presume I've mucked up a setting somewhere so advice on how to get is properly sorted is much appreciated.

[RandyL]

From the vista home premium help files.

 

"A guest account is an account for users who don't have a permanent account on your computer or domain. It allows people to use your computer without having access to your personal files. People using the guest account can't install software or hardware, change settings, or create a password."

 

I've never set up a guest account. Just administrator and standard accounts. I'm wondering if you may have set up sharing to allow access to other files, folders or directories.

[shrimply]

I don't think so, If I right click any of my folders sharing is turned off, the only shared folders are in the public folder and they are only for on the home network.

 

As a guest all I have to do is computer-->Users-->Me and I can open any of the folders/files without a password being requested or anything.

 

Unless there is a setting somewhere to allow the folders to be shared on all the accounts on the computer, but I can't find one.

[Dalo Harkin]

I agree with Randy - you must have the ''share files with all users'' box ticked - but for the life of me cant remember where it is.

I think its under the folder options in the control panel

[Guest Wolfeymole]

Have a look at Parental Controls Shrimps.

 

Explore the features: Parental controls

[RandyL]

I'm going to have to pass on this one for now. It's way too late for me to set it up and screw it up in order for me to undo it later. Hopefully someone will figure it out before I get time to play with it.

 

Vista is sure is new isn't it?

[shrimply]

Thanks everyone, I have had a look around but can't find " share files with all users" anywhere, that's probably just me being daft

 

And you can't use parental controls on a guest account, I'd probably be just as well disabling it and re- enabling it and see if that made any difference.

 

Does it have anything to do with network file sharing, because that's definitely turned off and if I click " show files and folders I am sharing" there is nothing there, but I don't know if that is linked to folder sharing between accounts.

[RandyL]

Look in Control Panel. Switch to Classic View. Network and Sharing Center>Show me all the files and folders I am sharing.

 

What do you see?

[shrimply]

There is nothing in that folder, which leads me to believe that I'm not sharing anything with the other accounts.

 

Maybe I'd be better off setting up a standard account with no password protection instead of a guest account.

[mike]

In XP you have the ability to "Set my files and folders private" when adding a new account under "User Accounts". Doing so makes your files and folders on accessible by your account. No other users (including a Guest) account can access them.

 

After doing a bit of reading it seems that Vista doesn't have this option, instead it relies on User Account Control (UAC). Is this enabled? If not, try enabling it and then try the Guest account again? - I could be wrong but just what I’ve read!

 

Hope it helps.

[shrimply]

Hi ,all still no luck, UAC is turned on. I tried disabling the guest account and re-enabling it, with the same result.

 

I tried setting up a standard account and it doesn't have full file access, so I guess this is an option, but I'd still like to know why the guest account isn't working. I know I'm difficult, thanks for all the help.

[RandyL]

I've made a note on my desktop and will try to see next week if I get time. Remind me if I forget shrimply.

[shrimply]

Thanks I appreciate it, I don't know how these things always happen to me.

[RandyL]

I checked my Standard account and turned on the Guest account. Although I can use Explore to navigate to the Administrator files and folders under Users and can see them I cannot access them. I get permission denied errors.

 

So this might be a permissions settings that you have allowed from the Administrator account. While in the Administrator account right click a folder or file then click properties then click the security tab. Check the permissions for it after you select the Guest account.

 

Keep in mind that another account may be able to see what files and folders are there but they can't open them unless you gave permissions to.

 

As far as installed programs it depends. Some programs will install to all accounts and some won't. Others will ask first if you want to install to just the one account or all accounts.

 

So I guess the next question would be exactly what has full access allowed. Is it your documents or pictures or programs or what?

[shrimply]

Hi, I'll have a play about, Its my documents and files really, I don't mind anyone accessing the programs as it makes sense that they are available for use, I'd just rather no one could muck up my personal files or folders, not that I expect they would, just rather it wasn't a possibility.

[shrimply]

Well, its fixed, kindof, I have a couple of new questions but they are a minor inconvenience more than anything else.

 

Basically in typical me fashion I completely destroyed the guest account, then ended up deleting some stuff from the registry and I actually have a guest account now with the correct level of access.

 

Thing is I also have a folder called TEMP in the users folder, and I am asked for permission before I can view either the guest folder or TEMP folder from the administrative account. I'm pretty sure neither was there before so bit confused about it.

 

Edit- deleted the TEMP folder and that seems to have solved both problems

Edited October 19, 2008 by shrimply