Re: Copying the Guests group

On Feb 26, 11:34 pm, "Roger Abell [MVP]" <mvpNoS...@xxxxxxx> wrote:
<andre...@xxxxxxxxx> wrote in message

news:1172513166.780899.232510@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx





On Feb 26, 8:09 am, "Roger Abell [MVP]" <mvpNoS...@xxxxxxx> wrote:
What are you attempting to accomplish?
You do realize that a member of theGuestsgroup, or the Guest
account itself, is effectively a member of the Users group when
used for a machine local login (if things are left at install defaults,
and if not then last I checked the login fails).
Why can you not accomplish your objective by having all inGuests, and
then segmenting those such that each is also in one
of a number of custom groups used to identify which category
ofGuestsmembers?
As with all groups, finding where they are used is a matter of
exhaustive examination of all possible resources.

<andre...@xxxxxxxxx> wrote in message

news:1172490375.001333.259060@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

I'd like to create a group in 2000/XP that basically mirrors the
Guestsgroup. Ideally I'd like to copy theGuestsgroup directly, but
assuming that's not doable...

How do you determine the permissions that are assigned to theGuests
group?

Assuming you had that set of permissions, is there a way to
programmatically assign them to a new group?

Thanks- Hide quoted text -

- Show quoted text -

TheGuestsgroup has the exact permissions that I'm looking for:
can't install applications or change any settings. But Windows
deletes the user profile of members of theGuestsgroup after each
login. I don't think there is a way to prevent that deletion, so I
want to create my ownGuestsgroup.

I'd like to create a basic user with Interactive and Authenticated
User permissions and that's about it.

Since in XP any interactive console login is a member of Users
(unless you have removed Authenticated Users and Interactive
from the Users group) I do not see what you gain by not just
using a regular limited user account. The profile will persist
and they are not able to install anything that yourGuestsmembers
cannot, nor change any settings theGuestsmembers cannot.

Roger- Hide quoted text -

- Show quoted text -

I just tested it and Users are allowed to install applications (only
available to them). Guests can't install anything at all.

So the Guests can log in, but they are not a member of Users. Guests
are just Interactive and Authenticated Users. So the Users group is
NOT the same as the Authenticated Users group.

Is there a way to modify the members of the built-in groups? I could
add a new group to the Interactive and Authenticated Users groups.
But built-in groups are filtered in the UI. Is there a way to edit
them?

.

Relevant Pages

  • Re: Copying the Guests group
    ... You do realize that a member of theGuestsgroup, ... and if not then last I checked the login fails). ... The Guests group has the exact permissions that I'm looking for: ...
    (microsoft.public.win2000.security)
  • Re: User Rights in Domain
    ... I your domain user account objects need to be members of the local Power ... As a member of the local Power Users ... group they are able to install a lot of software. ... > current Domain Admin from that group, ...
    (microsoft.public.win2000.active_directory)
  • Re: User Rights in Domain
    ... As a member of the ... local Power Users ... >group they are able to install a lot of software. ... >Also know that you can use NTFS permissions to help abate ...
    (microsoft.public.win2000.active_directory)
  • Re: Malaysian royal gatecrashes wedding
    ... > brawl at a wedding reception on one of the country's tropical holiday ... allegedly led by a member of the Johor royal family. ... > Reports say several foreign guests had to be taken to hospital. ... > This is just the latest incident linked to Johor's royalty. ...
    (alt.talk.royalty)
  • Malaysian royal gatecrashes wedding
    ... brawl at a wedding reception on one of the country's tropical holiday ... islands. ... allegedly led by a member of the Johor royal family. ... Reports say several foreign guests had to be taken to hospital. ...
    (alt.talk.royalty)