Solved

Missing something - Guest account keeps disabling itself

Posted on 2009-03-30
8
767 Views
Last Modified: 2012-05-06
I'm opening this question to see if anyone knows a way to determing how the account is becoming disabled. I've checked local group policy, domain group policy, group policies assigned to OU's and I'm not able to find anything that should be disabling the guest account on this machine. It's an XP workstation and I'm sharing printers to the network. Everything works fine when I have the guest account activated so I don't want to disable the guest account. Here's the entry that's added to the event viewer each time the account is disabled.

3/24/2009 7:03:57 PM
User: NT AUTHORITY\SYSTEM
Computer: AIR-RELEASE

Description:
User Account Disabled:
       Target Account Name: Guest
       Target Domain         : AIR-RELEASE
       Target Account ID  : AIR-RELEASE\Guest
       Caller User Name   : AIR-RELEASE$
       Caller Domain         : NAL_A
       Caller Logon ID         : (0x0,0x3E7)

The time that is disabled changes because I'm pretty sure it's related to a cycling event and is affected by the next time I enable the account. I've been logging in each morning and re-enabling the guest account and it works all day long. I've had it disable as early as 7pm range and other nights as late as 2am in the morning. I would think if it was group policy it would happen much more often and much more aggressive.

Ultimately I just need this solved. I'm either looking for a direct way of making sure the guest account doesn't disable or I'm looking for a method to track down the rule that is disabling it so that I can change that rule. I still feel like it's related to group policy but just can't find it.
0
Comment
Question by:CubeRoot
  • 4
  • 3
8 Comments
 
LVL 27

Expert Comment

by:David-Howard
ID: 24023130
If you're certain that Group Policy isn't affecting the account you might try SFC SCANNOW or a Repair.
SFC SCANNOW takes about fifteen minutes and a Repair about forty minutes.
Both require your OS CD.
SFC SCANNOW
http://www.updatexp.com/scannow-sfc.html
XP Repair:
http://www.michaelstevenstech.com/XPrepairinstall.htm
A Repair is not designed to overwrite data but you should take precautions.
Additionally, while a Repair may correct the issue it will require that you reinstall your most current Service Pack as well as the Hotfixes that accompany it.
0
 
LVL 3

Author Comment

by:CubeRoot
ID: 24023196
I'll give that a shot. I'm not certain that group policy isn't doing the action. I'm just fairly positive that I don't currently have a group policy assigned. I wondering if it's an old setting that's still being reapplied locally to that machine. Not sure if that's even possible.
0
 
LVL 4

Accepted Solution

by:
anuroopkoka2005 earned 500 total points
ID: 24037553
Try to remove the machine from the domain and check the guest account whether the account is still getting disabled....

0
 
LVL 4

Expert Comment

by:anuroopkoka2005
ID: 24037571
Also check the local security policy...
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 3

Author Comment

by:CubeRoot
ID: 24039051
I didn't see anything set in the local security policy. I had the same idea last night about removing the machine from the domain and seeing what that does. I think removing from the domain is a great idea and I'll try that this morning.
0
 
LVL 4

Expert Comment

by:anuroopkoka2005
ID: 24039072
ok sure i will be waiting
0
 
LVL 3

Author Comment

by:CubeRoot
ID: 24101329
I've unjoined the workstation from the domain, re-enabled the guest account, checked local group policy.
It's been two days now and the guest account is still active. Before I removed the workstation from the domain, I couldn't change the local group policy setting for disabling the guest account. It was set to enable but was grayed out. After settting the workstation back to a workgroup, I can now change the local group policy setting. I'm thinking I had some mysterious group policy being applied even though I couldn't find any policies assigned the the workstation or it's OU's.
0
 
LVL 3

Author Closing Comment

by:CubeRoot
ID: 31564385
removing from the domain solved the issue. Thanks for the idea.

0

Featured Post

Do email signature updates give you a headache?

Are you constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Running VB/Batch script through Group policy 30 79
laptop estate analysis 5 63
Problem to search 5 25
Batch file to convert a xlsx file to csv 5 45
For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now