Skip to content

TechRepublic

  • Top Products Lists
  • AI
  • Developer
  • Payroll
  • Security
  • Project Management
  • TechRepublic Academy
  • Innovation
  • Cheat Sheets
  • Cloud
  • 5G
  • Big Data
  • TechRepublic Premium
  • Top Products Lists
  • AI
  • Developer
  • Payroll
  • Security
  • Project Management
  • TechRepublic Academy
  • Innovation
  • Cheat Sheets
  • Cloud
  • 5G
  • Big Data
  • See All Topics
  • Sponsored
  • Newsletters
  • Forums
  • Resource Library
TechRepublic Premium
Join / Sign In
Microsoft

Create a secure Guest Account in Windows 7

By Mark W. Kaelin August 24, 2010, 12:55 AM PDT

Image
1
of 9

459656.png
459656.png
Create a secure Guest Account in Windows 7

Find the guest account setting

Find the guest account setting

ntIn certain environments and situations, you may want to grant guest-user access to a workstation running Microsoft Windows 7. Best practices dictate that such access be as secure as possible. Here are several steps you can, and should, take before giving access to a guest user in Windows 7.
nt
ntNote: This tip applies to Windows 7 Professional and Ultimate only. It does not apply to Windows 7 Home Premium.
nt
ntSecure Guest Account
ntThe first step is to enable guest accounts, which is disabled by default. Type “computer” into the Start Menu search box as shown and then click on the “Computer Management” item in the results.
nt
ntThis gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic. The gallery was originally published in August 2010.

Create a secure Guest Account in Windows 7

Enable guest accounts

Enable guest accounts

Navigate the left tree hierarchy to the Users Folder under Local Users and Groups. Double-click the Guest entry.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Uncheck to enable

Uncheck to enable

On the next configuration screen, uncheck the Disable guest account box to enable guest accounts.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Set the guest account password

Set the guest account password

By default, the guest account password is blank, but that is an unnecessary security risk, so you should establish a password. Right-click the Guest entry in the Computer Management console and click the Change Password entry. The ensuing warnings are not a concern if you just enabled the guest account.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Local Security Policy

Local Security Policy

Another potential security problem occurs if the guest account is accessible by other users across the network. To prevent this, type “Local Security” into the Start Menu search box and then click the Local Security Policy entry as shown.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Deny access

Deny access

Navigate to the Local Policies | User Rights Assignments entry. Scroll down the list of policies until you find “Deny access to this computer from the Network.” Guest should be one of the denied accounts listed. If it isn’t, add it.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Shut Down the System

Shut Down the System

Another potential security vulnerability occurs during the PC shutdown process. You should deny the guest account the ability to shut down a PC. Go back to the Local Security Policy consoled as you did before, navigate to Local Policies | User Rights Assignments and look for the entry “Shut Down the System.”

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

Guest is not on the list

Guest is not on the list

Double-click the entry to make sure the Guest account is not in the list.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

Create a secure Guest Account in Windows 7

DWORD should be 1

DWORD should be 1

One last security concern is the Event logs u2013 you don’t want a guest account to have access to that information. The most efficient way to manage these settings is with a Registry edit.

Warning: Editing the Windows Registry should be done with caution; we recommend that you have a verified backup of the file ready in case of a catastrophic failure.

Type in “regedit” into the Start Menu Search box and then click the regedit.exe entry. Navigate down the keys until you reach this entry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Eventlog

Under this key are three important sub-keys: Application, Security, and System. There should be a key under each section: Restrict Guest Access. And each of those keys should have a corresponding DWORD of “1” that enables this restriction.

This gallery is also available as a TechRepublic blog post and download. Image created by Mark Kaelin for TechRepublic.

  • Microsoft
  • Account Information

    Share with Your Friends

    Create a secure Guest Account in Windows 7

    Your email has been sent

Share: Create a secure Guest Account in Windows 7
Image of Mark W. Kaelin
By Mark W. Kaelin
Mark W. Kaelin has been writing and editing stories about the information technology industry, gadgets, finance, accounting, and tech-life for more than 25 years. Most recently, he has been a regular contributor to BreakingModern.com, aNewDomain.net,
  • Account Information

    Contact Mark W. Kaelin

    Your message has been sent

  • |
  • See all of Mark W.'s content

TechRepublic Premium

  • TechRepublic Premium

    Office relocation checklist

    PURPOSE New office launches and site relocations run the range from straightforward to overly complex. For intricate, sophisticated new office deployments and larger site moves, TechRepublic Premium’s Office relocation checklist can help plan, monitor and execute such projects. From the checklist: LIST REQUIRED OF EQUIPMENT AND SERVICES Begin by creating a simple list of required ...

    Downloads
    Published:  May 25, 2023, 4:00 PM EDT Modified:  May 26, 2023, 11:17 AM EDT Read More See more TechRepublic Premium
  • TechRepublic Premium

    Onboarding and offboarding IT staff checklist

    PURPOSE Onboarding and offboarding employees requires careful attention. Otherwise, team members may receive insufficient permissions to perform their jobs or continue to have access long after their employment’s termination. Given the stakes, the problem is even worse when managing IT staff permissions, so it’s imperative that your company adopts a system to ensure consistency. Employees, ...

    Downloads
    Published:  May 24, 2023, 4:00 PM EDT Modified:  May 25, 2023, 9:19 AM EDT Read More See more TechRepublic Premium
  • TechRepublic Premium

    10 must-know Firefox tips

    PURPOSE TechRepublic Premium presents 10 tips for the Firefox open-source browser. Even if you only follow some of these, you’ll find your browser experience to be much improved. From the article: 1. USE CAUTION WITH ADD-ONS AND THEMES This is one of the first tips I always offer. I’ve seen web browsers with so many ...

    Downloads
    Published:  May 23, 2023, 4:00 PM EDT Modified:  May 24, 2023, 6:46 PM EDT Read More See more TechRepublic Premium
  • TechRepublic Premium

    Bring your own device policy

    PURPOSE The purpose of this Bring your own device policy from TechRepublic Premium is to provide requirements for BYOD usage and establish the steps that both users and the IT department should follow to initialize, support and remove devices from company access. These requirements must be followed as documented in order to protect company systems ...

    Downloads
    Published:  May 22, 2023, 4:00 PM EDT Modified:  May 23, 2023, 7:26 PM EDT Read More See more TechRepublic Premium

Services

  • About Us
  • Newsletters
  • RSS Feeds
  • Site Map
  • Site Help & Feedback
  • FAQ
  • Advertise
  • Do Not Sell My Information

Explore

  • Downloads
  • TechRepublic Forums
  • Meet the Team
  • TechRepublic Academy
  • TechRepublic Premium
  • Resource Library
  • Photos
  • Videos
  • TechRepublic
  • TechRepublic on Twitter
  • TechRepublic on Facebook
  • TechRepublic on LinkedIn
  • TechRepublic on Flipboard
© 2023 TechnologyAdvice. All rights reserved.
  • Privacy Policy
  • Terms of Use
  • Property of TechnologyAdvice