Blog
Restricting Guest Account's Access To My Files for Windows Operating System
Question: Restricting Guest Account's Access To My Files for Windows Operating System
Answer from:
Name: "Theresa"
Microsoft Answers Support Engineer
A little info on the Default Guest account.
The Guest account is designed for users who require temporary access to a
computer and don’t need to store their user-specific profile settings
permanently. Users who log on as a guest have a very limited set of
permissions. For example, they cannot access
other users’ files or perform system wide tasks such as installing
software or hardware.
For security reasons, the built-in Guest account is disabled by default. This prevents users from having an option to log on to the system as Guest.
Files on the root of C: are available to the guest account in order to allow it to run properly, but files in the "Users" folder are not unless someone gave the guest user folder permissions.
To further restrict the guest accounts permissions you can restrict them on a per-folder level.
PLEASE BE AWARE – Restricting user permissions in the Program files or Windows folders will cause the Guest account to function improperly or not function at all!!!
Changing Folder Permissions
-
Right Click on the Folder you wish to restrict properties on
-
Select “Properties”
-
In the Properties window go to the Security tab and click on Edit.
-
If the Guest user account is not on the list of users or groups that have permissions defined, you should click on Add. Now you need to type the user name or the group of users for which you want to change the permissions. Type “Guest” in the names box.
-
After adding the guest account, Click Check Names and then click OK.
-
In the Security window, select the user/group you just added and then click in the first check box under Deny which is “Full Control” and then click OK.
Theresa
Microsoft Answers Support Engineer
Click On the Image to Clearly view
