Re: Copying the Guests group

<andrewbb@xxxxxxxxx> wrote in message
news:1172656775.716860.233350@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Feb 28, 2:34 am, andre...@xxxxxxxxx wrote:

Nevermind... I was making the assumption the Guest account was the
same as the Guests group.

You're right. Users and Guests are essentially the same.

So what are the extra restricted permissions on the Guest account? Is
this Group Policy?


As far as I am aware, the speculiar behaviors of the Guest
account are hard-coded (i.e. if not Guest then general rules
apply - types of checks)

As Paul indicated, an accounts token gets packed with a number
of SIDs that represent the groups in which it holds memberships
and also represent other attributes of the account usage.

Why I mentioned two of these later, Authenticated Users and
Interactive, is that these are commonly within the Users group,
meaning any account login that has those in its token is effectively
operating with Users group membership, even if it is not otherwise
apparent that the account is a Users group member.

Permissions granted to those predefined principals are accomplished
in the normal way, for example you will see Authenticated Users in
filesystem grants, etc..

Whowever, the behaviors that make Guest unique are, as far as I
know, not something one can confer upon an account of choice.

Roger


.

Relevant Pages

  • RE: Bypass Traverse Checking?
    ... This article discusses the inclusion of Authenticated Users in the access ... token for an account that connects as a guest; ... won't have that token in the guest context is the built-in Guest account ... > looking at the SID of the account. ...
    (Focus-Microsoft)
  • Re: Help with Guest account
    ... Account and created a new User Account. ... Same thing in the Guest ... problem accessing the internet with it as it uses that same network ... enable the Guest Account is "an" administrator account. ...
    (microsoft.public.windowsxp.security_admin)
  • Fw: Bypass Traverse Checking?
    ... Everyone includes everyone, from guest to Administrator. ... Authenticated Users don't include Guest and Everyone does. ... account, but anonymous access authenticated as IUSR. ...
    (Focus-Microsoft)
  • RE: Bypass Traverse Checking?
    ... Authenticated Users, because they are significantly different (different ... account without that SID in its token would not be able to access the ... you are affecting Anonymous Logon and the _builtin_ Guest ... account. ...
    (Focus-Microsoft)
  • Re: Office 2004 Mainstream Support Has Been Extended two years!
    ... Further research indicates that it affects systems where the the Guest ... Phillip: I should have done a bit more research :-) ... concept of a "Guest" account. ... John McGhie, Microsoft MVP, Consultant Technical ...
    (microsoft.public.mac.office.word)