Configure profile for a domain guest account

I have several computers that are used by the public so I created a guest login account that is only a member of the domain guest group. So when the user logs off the profile is deleted. What is the best way to control the default profile settings for this guest account? I want to be able to set a default printer, desktop background, desktop icons and configure IE 8 when the guest account logs in each time. We run a Win2k3 AD with XP Pro Workstations. Thank you...
pharmon96Asked:
Who is Participating?
 
Joseph DalyCommented:
You may want to take a look at using microsoft steady state for this.
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

Another way of locking down this computers would be to put them in their own OU and then apply a locked down group policy to them. But to give you more information on how to do that I would need to know exactly what you dont want the users to be able to do.
0
 
pharmon96Author Commented:
The only things the guest user needs is internet access and printing.
0
 
Joseph DalyCommented:
That can be done with group policy by hiding start menu and desktop items, control panel, the run command, blocking programs, access to file locations, etc. There are a huge amount of settings and options that you can configure.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
pharmon96Author Commented:
can you set default printers and IE setting with GP?
0
 
Joseph DalyCommented:
You can lock down internet explorer with group policies.

As far as the printers it depends on your domain controllers, do you have any 2008 DC's?
0
 
pharmon96Author Commented:
No, DC's are 2003..
0
 
Joseph DalyCommented:
Ok then if your DCs are 2003 you will need to do it via a login script. An example of that can be seen here.

http://www.computerperformance.co.uk/Logon/LogonScript_Printer_Bonus.htm

If you had a 2008 DC you could use group policy prefferences to deploy the printers.
0
 
pharmon96Author Commented:
thank you!
0
 
pharmon96Author Commented:
xxdcmast,
Can you give me some instruction on creating a new OU and GP for my guest account? Thank you!!!
0
 
Joseph DalyCommented:
In active directory users and computer you would just right click somewhere and select new organizational unit.

As far as for the group policy you would download the GPMC
http://www.microsoft.com/downloads/details.aspx?FamilyID=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887 

Once in the gpmc you can go to the group policy objects folder and select create new.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.