Solved

Disable Option for Guest Account

Posted on 2011-09-20
14
230 Views
Last Modified: 2012-06-21
I have a Windows XP Professional machine we want to use in our showroom for customers to access our website.  It is not on a domain.  I want them to use the "Guest" account built-in to Windows XP.  However, I want to lock down many apps and features so that they cannot be accessed by a user logged on as "Guest".  Specifically I want to make sure they cannot access explorer.exe by right-clicking on the Start Menu among other things.  I have tried GPO but cannot find any of the options described in other solutions.  Please advise! Group Policy Editor
0
Comment
Question by:mshaffner
  • 8
  • 6
14 Comments
 
LVL 7

Expert Comment

by:Jacobfw
ID: 36568681
This support article may help:
http://support.microsoft.com/kb/323525
0
 

Author Comment

by:mshaffner
ID: 36568757
As shown in my screenshot, I do not have the options discussed in this article.  Under Administrative Templates, it only shows:
Windows Components
-Windows Media Player
-Windows Update

I also tried downloading the "Microsoft Shared Access Toolkit", but it appears it is no longer available from the Microsoft Download Center.
0
 

Author Comment

by:mshaffner
ID: 36568892
Figured out how to get the "System" option under Admin Templates.  Let me see what I can do with it!
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 
LVL 7

Expert Comment

by:Jacobfw
ID: 36568896
Try this:

Access the Snap-in via MMC.

Go to Start Menu > Run > type: mmc
This will bring up a console screen.
Click File > Add/Remove Snap In

This will now bring up a Add Standalone Snap In Window.
Click the Add button, Select the Group Policy item and click the Add button.
Then on the next windows just click Finish (confirms your modifying the local computer’s group policy).

Then click the Close button on the Add Standalone Snap In screen.

And then Click OK on the console window.

Now the console window will open. With the Local Computer Policy Item on the Left.

Expand the item, there will be two sets of options:
-Computer Configuration
-User Configuration

0
 

Author Comment

by:mshaffner
ID: 36569170
This does a lot of what I need, but it affects ALL USERS, when in reality I only want it to affect the GUEST user account (alternatively, any account I specify)...
0
 
LVL 7

Expert Comment

by:Jacobfw
ID: 36569216
Are these domain users or local users?
To set domain wide restrictions for the user, I think you need to make the global policy changes within the Active Directory.
0
 

Author Comment

by:mshaffner
ID: 36569246
local users - no active directory here
0
 
LVL 7

Expert Comment

by:Jacobfw
ID: 36569366
Control Panels -> Administrative Tools -> Local Security Policy -> Software Restrictions Policy

http://technet.microsoft.com/en-us/library/bb457006.aspx

Can restrict by Administrators and other Uses, but not individual users.
0
 

Author Comment

by:mshaffner
ID: 36569618
okay so I'm getting really irritated now.  Apparently I've done such a good job locking things down in Group Policy, I can't get to Administrative Tools or very much of anything else....
0
 

Author Comment

by:mshaffner
ID: 36569679
System Restore got me operational again...

Tried Software Restrictions Policy only to lock myself out of everything again.

I think I need some sort software to assist with my goal??
0
 
LVL 7

Expert Comment

by:Jacobfw
ID: 36570060
0
 

Author Comment

by:mshaffner
ID: 36574992
I'm trying software I found called "Windows Steady State".  Anyone of any experience with it, as it seems to do what I want, but I'm having some issues with it.
0
 
LVL 7

Accepted Solution

by:
Jacobfw earned 500 total points
ID: 36575215
mshaffner:
Maybe best if you open a new question for your issues with Windows Steady State, so that other experts can find your question and assist.  I am glad you are finding something that helps.
0
 

Author Comment

by:mshaffner
ID: 36575260
Thanks for your help!
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you build your web application in Visual Studio you'll get at least a few binaries, or .DLL, files in your bin folder. However, there is more compiling to be done. Normally this would happen when an ASP.NET resource within the web site is request…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question