Solved

gpedit for Guest

Posted on 2003-12-08
13
1,610 Views
Last Modified: 2012-05-04
Hello,
I am trying to lockdown the guest account in windows XP Pro.
I am using gpedit. I go to user configuration/administrative templates/ start menu and taskbar …
and make the changes that I need, but they are active for the administrator account, not the guest account.
Is there a way to make the changes for the guest account only?
I want to limit guest access to surfing the internet only. Or at least limit access to the system.

Any help would be appreciated.
0
Comment
Question by:wcubed
  • 8
  • 5
13 Comments
 
LVL 34

Expert Comment

by:sramesh2k
ID: 9896113
>>Or at least limit access to the system
Try disabling the guest acount from Control Panel User accounts.

See if this helps: Restrict Internet for a Local User
http://www.mvps.org/sramesh2k/
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 9896183
Use GPEDIT explained in the above link.

or

Restrict Users from Running Specific Applications
http://www.kellys-korner-xp.com/xp_a.htm#xp_restrict

[application based restrictions instead of RAS restrictions]
0
 

Author Comment

by:wcubed
ID: 9896192
sramesh2k thank you for your answer. I may not have been clear enough on what I needed.
I need to have full access in the administrator account.
I need to restrict the guest account to just internet access.
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 9896202
Yes. You can accomplish the same using the above links.
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 9896231
http://www.kellys-korner-xp.com/xp_a.htm#xp_restrict
This link specifies how to block applications for an account.

[Ignore the first link which explains how to block internet access, which you don't require]
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 9896237
another option you may consider using using file/folder permissions. You may permit or disallow a folder to be accessed by Guests. [This requires the File system to be ntfs]
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 

Author Comment

by:wcubed
ID: 9896282
Thank you, I will start reading. Looks like what I need.
Do you know if it is possible to block all programs/folders at once, rather then setting the permissions for each folder? Then unlock explorer.
0
 
LVL 34

Accepted Solution

by:
sramesh2k earned 500 total points
ID: 9896318
The section "Restrict Applications Users Can Run" should help you. [Different than "Restrict Users from Running Specific Applications"]

However, you need to list each application.exe name in registry (a tedious job if you want to allow large number of programs to that user)

I'm not sure how to accomplish the same via GPEDIT *only* for the Guest account. the above tip might help you.

0
 

Author Comment

by:wcubed
ID: 9896380
Super thank you.
I`ll Let you know how it goes
0
 

Author Comment

by:wcubed
ID: 9896864
That looks like what I need, but I am not allowed to change the regedit settings.
Is there a way to allow guest to change the reg settings?
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 9897146
Please see advanced registry editing
http://www.dougknox.com/xp/tips/xp_adv_reg_editing.htm

NOTE: If you are not comfortable editing the registry at any stage, please seek the advice of an expert then and there. Don't lock your self out of the system.
0
 

Author Comment

by:wcubed
ID: 9900556
sramesh2k
Thank you for all your help. Restrict Applications Users Can Run was exactly what I needed and did the trick. Unmfortunatly I did not add regedit to the list of programs :-(
But XP has a great restore function; so it should not be a problem.

Thanks again,
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 9900619
You're most welcome :o)
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Ok I have been working on this for some time having learned and gained certification in XenDesktop 4 along came version 5 which was released last month. Since then I have been working to deploy XenDesktop 5 in a small environment with only 2 virt…
For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now