Re: There isn't Guest. Re: How to Check? Re: Logs off after choosing a built-in guest account

From: Dmitriy Kopnichev (kopn@hotbox.ru)
Date: 08/18/02 

From: "Dmitriy Kopnichev" <kopn@hotbox.ru>
Date: Sun, 18 Aug 2002 12:57:02 +0400

Guest account is not in Users Group yet.
How to put Guest in Users group indirectly by the Users group having
Authenticated Users and/or INTERACTIVE within it? How to put Authenticated
Users and/or INTERACTIVE in Users group, how things are setup in a default
install?
"Roger Abell [MVP]" <mvpNOSPAM@asu.edu> wrote in message
news:eFMs3#oRCHA.3964@tkmsftngp12...
> OK, once again, you need to determine what you want.
> If Guest account is in Users, then it is effectively just like
> any other user account, so why not add a user for whatever
> purpose you would have used Guest ?
> If you do want Guest to be able to log in locally, then yes
> one way or another it needs to be in Users group, either
> directly by your putting it in there, or indirectly by the
> Users group having Authenticated Users and/or INTERACTIVE
> within it. The last is how things are setup in a default install.
> Guest, once logged in locally is fully a Users member or
> else it will not have access to critical executables of the
> system area and the login will fail.
>
> --
> Roger Abell
> MS MVP (Windows Platform), MCSE, MCDBA
> Associate Expert - Windows XP ExpertZone
> http://www.microsoft.com/windowsxp/expertzone
>
> "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> news:OHIh2jjRCHA.4228@tkmsftngp08...
> > Yes. A built-in Guest login fails and returns to login screen before
> desktop
> > is painted.
> > Should I add the built-in Guest to the Users group to resolve the
problem?
> > "Roger Abell [MVP]" <mvpNOSPAM@asu.edu> wrote in message
> > news:edROulhRCHA.1632@tkmsftngp11...
> > > It is normally in the Guests group.
> > > The Guest account also, indirectly is a member of Users
> > > group due to Authenticated Users and/or INTERACTIVE
> > > being in the Users group. It is being a member of Users
> > > that enables Guest account to work for local login. Without
> > > this, many things fail when Guest tries to log in locally.
> > > Also, I have seen logins that seem to work, but fail and
> > > return to login screen before desktop is painted, due to
> > > a login script that has a syntax error and bombs.
> > >
> > > --
> > > Roger Abell
> > > MS MVP (Windows Platform), MCSE, MCDBA
> > > Associate Expert - Windows XP ExpertZone
> > > http://www.microsoft.com/windowsxp/expertzone
> > >
> > > "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> > > news:e1fNulgRCHA.2520@tkmsftngp11...
> > > > Should the Guest account be in a built-in Guest group?
> > > > "Roger Abell [MVP]" <mvpNOSPAM@asu.edu> wrote in message
> > > > news:#ZDerCPRCHA.3664@tkmsftngp11...
> > > > > OK, so then let us check that either (or both) INTERACTIVE
> > > > > and Authenticated Users is still a member in the Users group,
> > > > > as it is initially in the install defaults.
> > > > >
> > > > > What you see in the Deny local logon user right is the remains
> > > > > from an account that has been deleted. There is no harm in
> > > > > deleting this (assuming your machine is not in a domain, or
> > > > > if it is in a domain then it is in contact with the domain
control).
> > > > >
> > > > > --
> > > > > Roger Abell
> > > > > MS MVP (Windows Platform), MCSE, MCDBA, MCT
> > > > > Associate Expert - Windows XP ExpertZone
> > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > >
> > > > > "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> > > > > news:eW6hE3ORCHA.4380@tkmsftngp08...
> > > > > > Hello
> > > > > > There is '*S-1-5-21-...' only in 'Deny logon locally Properties'
> > > window.
> > > > > > "Roger Abell [MVP]" <mvpNOSPAM@asu.edu> wrote in message
> > > > > > news:uFayvvORCHA.3648@tkmsftngp11...
> > > > > > > "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> > > > > > > news:eE1AXZORCHA.2252@tkmsftngp11...
> > > > > > > > Hello
> > > > > > > > How to Check whether the local policy user right to Deny
local
> > > logon
> > > > > > still
> > > > > > > > has Guest defined.
> > > > > > >
> > > > > > > In Local Security Policy (assuming Pro version), found
> > > > > > > in the Admin Tools. Then navigate to User Rights, find
> > > > > > > and double-click Deny logon locally. IIRC Guest is in it
> > > > > > > by default.
> > > > > > >
> > > > > > > --
> > > > > > > Roger Abell
> > > > > > > MS MVP (Windows Platform), MCSE, MCDBA
> > > > > > > Associate Expert - Windows XP ExpertZone
> > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > >
> > > > > > > > "Roger Abell [MVP]" <mvpNOSPAM@asu.edu> wrote in message
> > > > > > > > news:OWD1CuNRCHA.3360@tkmsftngp11...
> > > > > > > > > Check whether the local policy user right to
> > > > > > > > > Deny local logon still has Guest defined.
> > > > > > > > >
> > > > > > > > > To get the Administrator account to show in the
> > > > > > > > > Welcome screen you can use tweakUI or drill into
> > > > > > > > > the reg to HKLM\Software\microsoft\Windows
> > > > > > > > > NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
> > > > > > > > > and change the DWord value for Administrator to 1 or
> > > > > > > > > define one with that value.
> > > > > > > > >
> > > > > > > > > --
> > > > > > > > > Roger Abell
> > > > > > > > > MS MVP (Windows Platform), MCSE, MCDBA
> > > > > > > > > Associate Expert - Windows XP ExpertZone
> > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > >
> > > > > > > > > "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> > > > > > > > > news:OA9#9LDRCHA.3360@tkmsftngp11...
> > > > > > > > > > Hello
> > > > > > > > > > Why does Windows XP saves built-in guest account
settings
> > and
> > > > logs
> > > > > > off
> > > > > > > > > > immediately after clicking the built-in guest account
icon
> > on
> > > > the
> > > > > > > > > 'Welcome'
> > > > > > > > > > screen?
> > > > > > > > > > How to make a built-in administrator account reappear in
> the
> > > > 'User
> > > > > > > > > Accounts'
> > > > > > > > > > window in an other administrator account session?
> > > > > > > > > > --
> > > > > > > > > > Please, click Message menu, then 'Reply to all' in
Outlook
> > > > > Express.
> > > > > > > This
> > > > > > > > > > sends your reply to the newsgroups and to
> > > > > > > > > > my email address at the same time. Or reply to the
> > newsgroups
> > > > and
> > > > > my
> > > > > > > > > e-mail.
> > > > > > > > > > Mr. Dmitriy Kopnichev
> > > > > > > > > > e-mail: kopn@hotbox.ru
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages