none
block guest account from editing anything to the host os server 2012 r2

    Question

  • hello,

    For a project i need to make guest accounts but i need to prohibit them from making any changes to the os they are on.

    anybody got any idea's how i can do this?

    greetings,

    Monday, May 18, 2015 3:02 PM

Answers

  • Hi

     People using the guest account can not install software or hardware,they can not change settings or passwords,or could not Access any shared foldet etc.

    Also check this article;

    https://msdn.microsoft.com/en-us/library/cc755130.aspx?f=255&MSPPError=-2147217396

    And the guest account is disabled by default,and Microsoft recommend that it stay disabled.

    You can create simple Domain user account for this user.And just add this domain users account on remote desktop users on related serves.(So they just logon server,but not change anything.)

    Monday, May 18, 2015 3:21 PM
  • Hi,

    By default, the Guest Account status is not defined in Windows Server 2012r2.

    We could use disabled it using group policy.

    Steps as below:

    1. In Group Policy Management, double-click Group Policy Objects.

    2. Click the GPO that you want to edit.

    2. In Group Policy Management Editor, expand to Computer Configuration->Policies->Windows Settings->Security Settings->Local Policies->Security Options

    3. In the right panel, please double the “Accounts: Guest account status” item and then check “Define this policy setting”, then we could see the disabled is checked.

    4. Click OK.

    Regards.


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Thursday, May 21, 2015 2:41 AM
    Moderator

All replies

  • Hi

     People using the guest account can not install software or hardware,they can not change settings or passwords,or could not Access any shared foldet etc.

    Also check this article;

    https://msdn.microsoft.com/en-us/library/cc755130.aspx?f=255&MSPPError=-2147217396

    And the guest account is disabled by default,and Microsoft recommend that it stay disabled.

    You can create simple Domain user account for this user.And just add this domain users account on remote desktop users on related serves.(So they just logon server,but not change anything.)

    Monday, May 18, 2015 3:21 PM
  • Hi,

    By default, the Guest Account status is not defined in Windows Server 2012r2.

    We could use disabled it using group policy.

    Steps as below:

    1. In Group Policy Management, double-click Group Policy Objects.

    2. Click the GPO that you want to edit.

    2. In Group Policy Management Editor, expand to Computer Configuration->Policies->Windows Settings->Security Settings->Local Policies->Security Options

    3. In the right panel, please double the “Accounts: Guest account status” item and then check “Define this policy setting”, then we could see the disabled is checked.

    4. Click OK.

    Regards.


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Thursday, May 21, 2015 2:41 AM
    Moderator