gpedit.msc and the Guest Account

[Guest]

I need to disable certain features that the Guest account in Windows XP
allows. The features needed reside in gpedit.msc. So how do I go about doing
this? I tried making the guest account an administrator, but it didn't work.
As soon as I changed it back to a guest account, the settings were lost.

So I guess my question would be: is there any way to let the Guest account
access gpedit.msc and then later disable that access?

 

[Steven L Umbach]

The best thing to do is disable the guest account so that it can not be
used. -- Steve

 

[Guest]

ok, i can handle a disabled guest account. but there are still two accounts
that i need to keep available. how do i control restrictions for these
accounts? like, i want them to be able to install programs, but not able to
access the Add/Remove Programs control panel.

and more importantly, how do i do this without affecting my own account? i
know this can be done because i've seen it in effect.

 

[Steven L Umbach]

I assume here that you are taking about a stand alone computer that is not a
member of an Active Directory domain. If that is the case your best bet
would be to look at using the free Microsoft Shared Computer Toolkit which
may help out. The problem however is that for users to be able to install
most software they need to be a local administrator which makes it difficult
if not impossible to restrict them depending on their skill level and desire
to work around restrictions. Otherwise loot at "filtering" local Group
Policy by giving your user account deny NTFS permissions to the
windows\system32\group policy\user folder after you are done configuring
Group Policy however you will not be able to edit local Group Policy again
until you grant yourself full control permission to that folder again. ---
Steve

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx --- Shared
Computer Toolkit
http://support.microsoft.com/default.aspx?scid=kb;en-us;308418 --- how to
manage NTFS folder/file security permissions.