| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 105367 | 2009-11-29 15:06:00 | Guest account in Win 7 | Chikara (5139) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 834660 | 2009-11-29 15:06:00 | Hi all I'm running Win 7 64bit RC (eval) version. All my docs, music, etc are on a separate drive (Data E:) I thought I would set up a guest account so when I have visitors, they can use that for surfing or whatever they need to do. Only problem is, when you log on to the guest account, they seem to have full access to E: drive with all the data that is on there - which I don't want to happen. How can I restrict access to that with the guest account? There doesn't appear to be any settings against the guest account that I can find to change it, it's either turned on or off. It also got me wondering, just how good/secure is the guest account - what else could they do if they tried? Can they install or uninstall applications? (Not that I don't trust any of the people who will be using, but better safe than sorry) The windows 7 help itself doesn't say much and a Google search hasn't let me find an answer so far. Thanks! |
Chikara (5139) | ||
| 834661 | 2009-11-29 16:29:00 | You'll need to adjust the NTFS Filesystem permissions. First look in to converting the filesystem to NTFS (You can do this using the "convert" command without reformatting), then right-click on the drive --> Properties --> Security Deny "Guest" |
Chilling_Silence (9) | ||
| 834662 | 2009-11-30 11:53:00 | Thanks. The disc is already NTFS. If I look at Properties > Security, how do I deny guest? The options I see under "group or user names:" is - Authenticated users - SYSTEM - Administrators (PC Name\Administrators) - Users (PC Name\Users) I assume it must be the last one, users...if I highlight users and click edit, I get the following options to Allow or Deny - Full control - Modify - Read & execute - List folder contents - Read - Write - Special permissions Currently, all are blank except Read & Execute, list folder contents, and Read which are ticked allow. So do I just change the Full Control to deny?? Why did MS make it so hard to change? I would have thought what I'm trying to do would be a fairly common function of a guest account?? |
Chikara (5139) | ||
| 834663 | 2009-11-30 17:13:00 | No MS haven't made it difficult at all. It's relatively standard file system permission setting that way, across Windows, Linux, BSD etc. Trust me, you'd be *pissed* if it was just FAT32 and the user had free reign across your system to do whatever they pleased. Anyways, you want to add a new user to the list, "Guest", then deny that user access. If you deny "Users" then that'll deny ALL user accounts on your PC, including yourself, even though you're an administrator. Leave the rest in there, there's no need to remove all the "Extras", trust me ... |
Chilling_Silence (9) | ||
| 834664 | 2009-11-30 19:10:00 | As Chilling said, they haven't specifically made it hard. They presume you will use the My Documents folders etc, and set on your own account the "Make my folders private" option. | inphinity (7274) | ||
| 834665 | 2009-12-01 13:21:00 | Yeah, hear what you're saying, I just expected there would be some sort of wizard or menu where it would ask what access you want the guest to have, and then tick the relevant boxes and it does it all for you. I thought it would have been quite a common function when people set up guest accounts. Anyway, at least I know how to do it now, so thanks for your assistance :) |
Chikara (5139) | ||
| 1 | |||||