Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Configure profile for a domain guest account

Posted on 2010-01-05
10
Medium Priority
?
1,342 Views
Last Modified: 2013-12-04
I have several computers that are used by the public so I created a guest login account that is only a member of the domain guest group. So when the user logs off the profile is deleted. What is the best way to control the default profile settings for this guest account? I want to be able to set a default printer, desktop background, desktop icons and configure IE 8 when the guest account logs in each time. We run a Win2k3 AD with XP Pro Workstations. Thank you...
0
Comment
Question by:pharmon96
  • 5
  • 5
10 Comments
 
LVL 35

Accepted Solution

by:
Joseph Daly earned 2000 total points
ID: 26184407
You may want to take a look at using microsoft steady state for this.
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

Another way of locking down this computers would be to put them in their own OU and then apply a locked down group policy to them. But to give you more information on how to do that I would need to know exactly what you dont want the users to be able to do.
0
 

Author Comment

by:pharmon96
ID: 26184516
The only things the guest user needs is internet access and printing.
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 26184623
That can be done with group policy by hiding start menu and desktop items, control panel, the run command, blocking programs, access to file locations, etc. There are a huge amount of settings and options that you can configure.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:pharmon96
ID: 26184658
can you set default printers and IE setting with GP?
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 26184695
You can lock down internet explorer with group policies.

As far as the printers it depends on your domain controllers, do you have any 2008 DC's?
0
 

Author Comment

by:pharmon96
ID: 26184714
No, DC's are 2003..
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 26184743
Ok then if your DCs are 2003 you will need to do it via a login script. An example of that can be seen here.

http://www.computerperformance.co.uk/Logon/LogonScript_Printer_Bonus.htm

If you had a 2008 DC you could use group policy prefferences to deploy the printers.
0
 

Author Comment

by:pharmon96
ID: 26184870
thank you!
0
 

Author Comment

by:pharmon96
ID: 26192041
xxdcmast,
Can you give me some instruction on creating a new OU and GP for my guest account? Thank you!!!
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 26210921
In active directory users and computer you would just right click somewhere and select new organizational unit.

As far as for the group policy you would download the GPMC
http://www.microsoft.com/downloads/details.aspx?FamilyID=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887 

Once in the gpmc you can go to the group policy objects folder and select create new.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
I’m willing to make a bet that your organization stores sensitive data in your Windows File Servers; files and folders that you really don’t want making it into the wrong hands.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Suggested Courses

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question