Skip to content

TechRepublic

  • Top Products Lists
  • Developer
  • 5G
  • Security
  • Cloud
  • Artificial Intelligence
  • Tech & Work
  • Mobility
  • Big Data
  • Innovation
  • Cheat Sheets
  • TechRepublic Academy
  • CES
  • TechRepublic Premium
  • Top Products Lists
  • Developer
  • 5G
  • Security
  • Cloud
  • Artificial Intelligence
  • Tech & Work
  • Mobility
  • Big Data
  • Innovation
  • Cheat Sheets
  • TechRepublic Academy
  • CES
  • See All Topics
  • Sponsored
  • Newsletters
  • Forums
  • Resource Library
TechRepublic Premium
Join / Sign In
Microsoft

Create a secure Guest Account in Windows 7

By Mark W. Kaelin August 24, 2010, 12:55 AM PDT

Image
1
of 9

459656.png
459656.png
Create a secure Guest Account in Windows 7

Find the guest account setting

Find the guest account setting

ntIn certain environments and situations, you may want to grant guest-user access to a workstation running Microsoft Windows 7. Best practices dictate that such access be as secure as possible. Here are several steps you can, and should, take before giving access to a guest user in Windows 7.
nt
ntNote: This tip applies to Windows 7 Professional and Ultimate only. It does not apply to Windows 7 Home Premium.
nt
ntSecure Guest Account
ntThe first step is to enable guest accounts, which is disabled by default. Type “computer” into the Start Menu search box as shown and then click on the “Computer Management” item in the results.
nt
ntThis gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic. The gallery was originally published in August 2010.

Create a secure Guest Account in Windows 7

Enable guest accounts

Enable guest accounts

Navigate the left tree hierarchy to the Users Folder under Local Users and Groups. Double-click the Guest entry.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Uncheck to enable

Uncheck to enable

On the next configuration screen, uncheck the Disable guest account box to enable guest accounts.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Set the guest account password

Set the guest account password

By default, the guest account password is blank, but that is an unnecessary security risk, so you should establish a password. Right-click the Guest entry in the Computer Management console and click the Change Password entry. The ensuing warnings are not a concern if you just enabled the guest account.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Local Security Policy

Local Security Policy

Another potential security problem occurs if the guest account is accessible by other users across the network. To prevent this, type “Local Security” into the Start Menu search box and then click the Local Security Policy entry as shown.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Deny access

Deny access

Navigate to the Local Policies | User Rights Assignments entry. Scroll down the list of policies until you find “Deny access to this computer from the Network.” Guest should be one of the denied accounts listed. If it isn’t, add it.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Shut Down the System

Shut Down the System

Another potential security vulnerability occurs during the PC shutdown process. You should deny the guest account the ability to shut down a PC. Go back to the Local Security Policy consoled as you did before, navigate to Local Policies | User Rights Assignments and look for the entry “Shut Down the System.”

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Guest is not on the list

Guest is not on the list

Double-click the entry to make sure the Guest account is not in the list.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

DWORD should be 1

DWORD should be 1

One last security concern is the Event logs u2013 you don’t want a guest account to have access to that information. The most efficient way to manage these settings is with a Registry edit.

Warning: Editing the Windows Registry should be done with caution; we recommend that you have a verified backup of the file ready in case of a catastrophic failure.

Type in “regedit” into the Start Menu Search box and then click the regedit.exe entry. Navigate down the keys until you reach this entry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Eventlog

Under this key are three important sub-keys: Application, Security, and System. There should be a key under each section: Restrict Guest Access. And each of those keys should have a corresponding DWORD of “1” that enables this restriction.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

  • Microsoft
  • Account Information

    Share with Your Friends

    Create a secure Guest Account in Windows 7

    Your email has been sent

Share: Create a secure Guest Account in Windows 7
Image of Mark W. Kaelin
By Mark W. Kaelin
Mark W. Kaelin has been writing and editing stories about the information technology industry, gadgets, finance, accounting, and tech-life for more than 25 years. Most recently, he has been a regular contributor to BreakingModern.com, aNewDomain.net,
  • Account Information

    Contact Mark W. Kaelin

    Your message has been sent

  • |
  • See all of Mark W.'s content

TechRepublic Premium

  • TechRepublic Premium

    Vendor contract renewal planner

    Determining how and when to renew support contracts can be tedious and time-consuming. Our vendor contract renewal planner will help you schedule support renewals and budget the related costs. From the planner: Some companies schedule their support contract renewals to take effect all at once, such as on January 1. This provides a convenient renewal ...

    Published:  February 1, 2023, 11:00 AM EST Modified:  February 2, 2023, 12:00 PM EST Read More See more TechRepublic Premium
  • TechRepublic Premium

    Access management policy

    Without appropriate access management controls, businesses are at significant risk from the loss or theft of both physical and digital assets. Access management controls establish who is allowed the appropriate level of access in order to do their jobs, while reducing the potential for damage or harm to the company. The purpose of this policy ...

    Downloads
    Published:  February 1, 2023, 11:00 AM EST Modified:  February 2, 2023, 4:00 PM EST Read More See more TechRepublic Premium
  • TechRepublic Premium

    IT staff systems and data access policy

    IT pros typically have access to company servers, network devices and data so they can perform their jobs. However, that access entails risk, including exposure of confidential information and interruption in essential business services. This policy from TechRepublic Premium offers guidelines for governing access to critical systems and confidential data. From the policy: SUMMARY IT ...

    Published:  January 31, 2023, 11:00 AM EST Modified:  February 1, 2023, 12:00 PM EST Read More See more TechRepublic Premium
  • TechRepublic Premium

    Windows administrator’s PowerShell script kit

    The Windows GUI is the traditional way to perform administrative tasks, but scripting offers faster and more versatile methods that can help further your technical skills. This download includes 21 publicly available PowerShell scripts, along with a document explaining each one, to help you up your scripting game and administer your AD environment more efficiently. ...

    Published:  January 31, 2023, 11:00 AM EST Modified:  February 1, 2023, 12:00 PM EST Read More See more TechRepublic Premium

Services

  • About Us
  • Newsletters
  • RSS Feeds
  • Site Map
  • Site Help & Feedback
  • FAQ
  • Advertise
  • Do Not Sell My Information

Explore

  • Downloads
  • TechRepublic Forums
  • Meet the Team
  • TechRepublic Academy
  • TechRepublic Premium
  • Resource Library
  • Photos
  • Videos
  • TechRepublic
  • TechRepublic on Twitter
  • TechRepublic on Facebook
  • TechRepublic on LinkedIn
  • TechRepublic on Flipboard
© 2023 TechnologyAdvice. All rights reserved.
  • Privacy Policy
  • Terms of Use
  • Property of TechnologyAdvice