Solved

Missing something - Guest account keeps disabling itself

Posted on 2009-03-30
8
761 Views
Last Modified: 2012-05-06
I'm opening this question to see if anyone knows a way to determing how the account is becoming disabled. I've checked local group policy, domain group policy, group policies assigned to OU's and I'm not able to find anything that should be disabling the guest account on this machine. It's an XP workstation and I'm sharing printers to the network. Everything works fine when I have the guest account activated so I don't want to disable the guest account. Here's the entry that's added to the event viewer each time the account is disabled.

3/24/2009 7:03:57 PM
User: NT AUTHORITY\SYSTEM
Computer: AIR-RELEASE

Description:
User Account Disabled:
       Target Account Name: Guest
       Target Domain         : AIR-RELEASE
       Target Account ID  : AIR-RELEASE\Guest
       Caller User Name   : AIR-RELEASE$
       Caller Domain         : NAL_A
       Caller Logon ID         : (0x0,0x3E7)

The time that is disabled changes because I'm pretty sure it's related to a cycling event and is affected by the next time I enable the account. I've been logging in each morning and re-enabling the guest account and it works all day long. I've had it disable as early as 7pm range and other nights as late as 2am in the morning. I would think if it was group policy it would happen much more often and much more aggressive.

Ultimately I just need this solved. I'm either looking for a direct way of making sure the guest account doesn't disable or I'm looking for a method to track down the rule that is disabling it so that I can change that rule. I still feel like it's related to group policy but just can't find it.
0
Comment
Question by:CubeRoot
  • 4
  • 3
8 Comments
 
LVL 27

Expert Comment

by:David-Howard
ID: 24023130
If you're certain that Group Policy isn't affecting the account you might try SFC SCANNOW or a Repair.
SFC SCANNOW takes about fifteen minutes and a Repair about forty minutes.
Both require your OS CD.
SFC SCANNOW
http://www.updatexp.com/scannow-sfc.html
XP Repair:
http://www.michaelstevenstech.com/XPrepairinstall.htm
A Repair is not designed to overwrite data but you should take precautions.
Additionally, while a Repair may correct the issue it will require that you reinstall your most current Service Pack as well as the Hotfixes that accompany it.
0
 
LVL 3

Author Comment

by:CubeRoot
ID: 24023196
I'll give that a shot. I'm not certain that group policy isn't doing the action. I'm just fairly positive that I don't currently have a group policy assigned. I wondering if it's an old setting that's still being reapplied locally to that machine. Not sure if that's even possible.
0
 
LVL 4

Accepted Solution

by:
anuroopkoka2005 earned 500 total points
ID: 24037553
Try to remove the machine from the domain and check the guest account whether the account is still getting disabled....

0
 
LVL 4

Expert Comment

by:anuroopkoka2005
ID: 24037571
Also check the local security policy...
0
Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

 
LVL 3

Author Comment

by:CubeRoot
ID: 24039051
I didn't see anything set in the local security policy. I had the same idea last night about removing the machine from the domain and seeing what that does. I think removing from the domain is a great idea and I'll try that this morning.
0
 
LVL 4

Expert Comment

by:anuroopkoka2005
ID: 24039072
ok sure i will be waiting
0
 
LVL 3

Author Comment

by:CubeRoot
ID: 24101329
I've unjoined the workstation from the domain, re-enabled the guest account, checked local group policy.
It's been two days now and the guest account is still active. Before I removed the workstation from the domain, I couldn't change the local group policy setting for disabling the guest account. It was set to enable but was grayed out. After settting the workstation back to a workgroup, I can now change the local group policy setting. I'm thinking I had some mysterious group policy being applied even though I couldn't find any policies assigned the the workstation or it's OU's.
0
 
LVL 3

Author Closing Comment

by:CubeRoot
ID: 31564385
removing from the domain solved the issue. Thanks for the idea.

0

Featured Post

Why do Marketing keep bothering you?

Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

Join & Write a Comment

Storage devices are generally used to save the data or sometime transfer the data from one computer system to another system. However, sometimes user accidentally erased their important data from the Storage devices. Users have to know how data reco…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup". After a while, you have entered a loop for Auto repair which does not fix anything and you will be in a  panic as all your work w…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now