Re: My Space



old volunteer wrote:

I support several volunteer library PC's running Win2000. Each are
configured separately but run through a common router to the Internet -
they
do NOT run through a server. Security is set up so I have the typical Win
Admin security and users have the typical "guest" security. This means
guest
cannot add or delete programs. But... I notice some of users will be able
have the "My Space" interface on them. The only way I can remove the My
Space interface is by going to Add/Delete programs in the control pannel -
and I can do this logged in as guest! Why is guest allowed to add/delete
myspace? Is there a flaw in the way I set up security? Thanks for a
response.

You shouldn't be using Guest. Disable Guest and create a new user account, a
standard user account. The Guest account is a special system account. It is
disabled by default in Windows XP, Vista, Linux, Unix, and OS X for a
reason.

From TechNet:

"The Guest account is intended for users who require temporary access to the
system. However, if this account is enabled, a security risk may exist
because an unauthorized user could gain anonymous access to the system
through this account."

http://technet.microsoft.com/en-us/library/bb418978(TechNet.10).aspx

So if you enabled Guest, disable it now. Call the new user account something
like "Visitor" or in your case, "Library User".

You can use Group Policy in Win2k to limit what those users can do.
Questions about using Group Policy can be asked in its newsgroup,
microsoft.public.windows.group_policy.

You can also look at Doug Knox's Security Console or the MS SteadyState
program to set the restrictions the way you want. You'll have to check to
see if either of those programs supports Win2k.

http://www.dougknox.com
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx
More on SteadyState: http://aumha.net/viewtopic.php?t=27570

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

.



Relevant Pages

  • Re: xp pro asks for password
    ... With the Guest Account Enabled ... Norton Internet Security 2005 ... >permission to use this network resource. ...
    (microsoft.public.windowsxp.network_web)
  • Hacker???
    ... tool I still was unable to recover my security templates ... we disabled the "guest" account ...
    (microsoft.public.windowsxp.security_admin)
  • Re: unrestricted access to a file share
    ... the "force guest" behavior. ... seen anonymous listed in security log and in Shared Folders -connections ... account out to those at the location. ... fileshare that have never been defined on the server (neither the user ...
    (microsoft.public.security)
  • Re: Cannot remote connect to C$ as Admin
    ... that user account would need to exist on the remote computer and be in the ... There is also a security option that you could ... want to access and a quick way would be with the command net user guest. ... Also make sure that there is an administrator account available on the XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: password??
    ... It's probably for either the Guest account, or for the account you're using, ... On any XP Pro computer, check to see if Simple File Sharing (Control Panel - ... On XP Pro with SFS disabled, check the Local Security Policies (Control Panel - ...
    (microsoft.public.windowsxp.network_web)

Quantcast