RE: local login rights

From: Eli Allen (eallen@mail.bcpl.lib.md.us)
Date: 01/23/02


From: "Eli Allen" <eallen@mail.bcpl.lib.md.us>
To: "Rich Wilson" <wk633@yahoo.com>, <focus-ms@securityfocus.com>
Date: Wed, 23 Jan 2002 13:56:43 -0500

That article is wrong. I know I didn't disable the account manually yet the
account is disabled when the User Accounts control panel says the user is
off (i.e. when I turn off the account) and enabled when it gets turned on.

Eli

> -----Original Message-----
> From: Rich Wilson [mailto:wk633@yahoo.com]
>
> According to q300489
> http:// support.microsoft.com/support/kb/articles/Q300/4/89.ASP
>
> "The Guest account in Windows XP Home Edition and Windows XP
> Professional (when
> not joined on a domain) serves several special functions that relate to
> security and network shares. Because of its importance, you must
> not disable
> the Guest account. If you disable the Guest account, your network can have
> problems that include malfunctioned shares.
>
> In Control Panel, you can use the User Accounts tool to turn off the Guest
> account, which removes the listing of the Guest account from the Fast User
> Switching Welcome screen; however, the Guest account is not disabled."
>
> --- Eli Allen <eallen@mail.bcpl.lib.md.us> wrote:
> > What is the "Deny login locally" right supposed to do? I always thought
> > that should prevent you from logging into the box when you are
> local (i.e.
> > at the keyboard) so you basically can't have a login that gets you to a
> > desktop.
> >
> > But it seems like thats not true, at least in WinXP from a
> clean install.
> > The guest account is set to "Deny login locally" in the local security
> > policy but if you enable the guest account you can login with
> that account.
> > I thought that shouldn't be allowed.
> >
> >
> > --
> > Eli Allen
> > eallen@bcpl.net
> >
>
>
> __________________________________________________
> Do You Yahoo!?
> Send FREE video emails in Yahoo! Mail!
> http://promo.yahoo.com/videomail/
>