The Guest Account

Limited access can be permitted for casual users through the built-in Guest account. If the computer is for public use, the Guest account can be used for public log ons. Prohibit Guest from writing or deleting any files, directories, or registry keys (with the possible exception of a directory where information can be left). In a standard security configuration, a computer that allows Guest access can also be used by other users for files that they don’t want accessible to the general public. These users can log on with their own user names and access files in directories on which they have set the appropriate permissions. They will want to be especially careful to log off or lock the workstation before they leave it. The Guest account is discussed in Chapter 2 “Working with User and Group Accounts” in Microsoft Windows NT Server Concepts and Planning. For procedural information, see Help.