Re: Copying the Guests group

On Feb 28, 2:34 am, andre...@xxxxxxxxx wrote:
On Feb 26, 11:34 pm, "Roger Abell [MVP]" <mvpNoS...@xxxxxxx> wrote:





<andre...@xxxxxxxxx> wrote in message

news:1172513166.780899.232510@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

On Feb 26, 8:09 am, "Roger Abell [MVP]" <mvpNoS...@xxxxxxx> wrote:
What are you attempting to accomplish?
You do realize that a member of theGuestsgroup, or the Guest
account itself, is effectively a member of the Users group when
used for a machine local login (if things are left at install defaults,
and if not then last I checked the login fails).
Why can you not accomplish your objective by having all inGuests, and
then segmenting those such that each is also in one
of a number of custom groups used to identify which category
ofGuestsmembers?
As with all groups, finding where they are used is a matter of
exhaustive examination of all possible resources.

<andre...@xxxxxxxxx> wrote in message

news:1172490375.001333.259060@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

I'd like to create a group in 2000/XP that basically mirrors the
Guestsgroup. Ideally I'd like to copy theGuestsgroup directly, but
assuming that's not doable...

How do you determine the permissions that are assigned to theGuests
group?

Assuming you had that set of permissions, is there a way to
programmatically assign them to a new group?

Thanks- Hide quoted text -

- Show quoted text -

TheGuestsgroup has the exact permissions that I'm looking for:
can't install applications or change any settings. But Windows
deletes the user profile of members of theGuestsgroup after each
login. I don't think there is a way to prevent that deletion, so I
want to create my ownGuestsgroup.

I'd like to create a basic user with Interactive and Authenticated
User permissions and that's about it.

Since in XP any interactive console login is a member of Users
(unless you have removed Authenticated Users and Interactive
from the Users group) I do not see what you gain by not just
using a regular limited user account. The profile will persist
and they are not able to install anything that yourGuestsmembers
cannot, nor change any settings theGuestsmembers cannot.

Roger- Hide quoted text -

- Show quoted text -

I just tested it and Users are allowed to install applications (only
available to them). Guestscan't install anything at all.

So theGuestscan log in, but they are not a member of Users. Guests
are just Interactive and Authenticated Users. So the Users group is
NOT the same as the Authenticated Users group.

Is there a way to modify the members of the built-in groups? I could
add a new group to the Interactive and Authenticated Users groups.
But built-in groups are filtered in the UI. Is there a way to edit
them?- Hide quoted text -

- Show quoted text -

Nevermind... I was making the assumption the Guest account was the
same as the Guests group.

You're right. Users and Guests are essentially the same.

So what are the extra restricted permissions on the Guest account? Is
this Group Policy?


.

Relevant Pages

  • Re: Guest acount
    ... >> Paula wrote: ... >>> the guest account? ... >> Yes, but a better method is to leave the Guest login disabled, and just ... results in that account being indirectly a member ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Two-computer network, MSHOME is not accessible" on both
    ... from the network.", and if Guest isn't a member of Everyone, then Guest won't be ... able to access the computer from the network. ... member of "Everyone". ... The account already exists. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Please advise on how to I can handle guests, volunteer accounts in my public institution
    ... what should a guest on a per department basis also need ... narrowly define per department an account form that allows ... Authenticated Users being member of the Users group on some ... Helpdesk. ...
    (microsoft.public.security)
  • Re: Problem with user ID
    ... Local Users and Groups then to Users and double click his ID. ... Member Of tab make sure Guest is not listed, ... >dialog while logged in his account is lists as a guest ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help with Guest account
    ... Account and created a new User Account. ... Same thing in the Guest ... problem accessing the internet with it as it uses that same network ... enable the Guest Account is "an" administrator account. ...
    (microsoft.public.windowsxp.security_admin)