Sometimes we may need to create a Guest account, a so-called guest user, which can access the computer but with limited permissions. Regarding what is a Guest account, the official explanation given by Microsoft Windows 7 is that users can temporarily access your computer through a guest account. People using the guest account cannot install software or hardware, change settings, or create a password.
Unfortunately, the Guest account also opened the door for hacking. Some netizens joked, "I opened the Guest account, 360 security guards gave me 87 points, and closed 100 points."
Therefore, how to ensure that the Guest account is enabled and eliminate security risks? The purpose of this article is to teach you how to create a secure Guest account step by step.
First Steps Enable Guest Account
By default, Windows 7 will disable the Guest account, we need to manually enable it. The specific process is: Click “Computer Management& rdquo; -> “Local Users And Groups” –> Select "Users" Folders–> Double-click “Guest Account”-> Clear “Account Is Disabled>checkbox –> Click “OK(OK)”.
Second Step Set the security password for the Guest account
By default, the Windows 7 Guest account password is empty. For security reasons, it is recommended that you set a password for this account. The specific process is: select "Local Users And Groups" –> Right click “ Guest Account (Guest) & rdquo;-> Select “ Set Password (Set Password) & rdquo; > Pop up a warning, click “Proceed” –> Enter the new password twice, twice in a row, <;OK(OK)”.
The third step is to prohibit the Guest account for the network.
One of the security principles of the Guest account is that it cannot be accessed by other computers. Otherwise, other computer users on the network can log in to the computer as Guest. There are two ways to disable the Guest account for the network. The specific process is: select “Administrative Tools"Menu–> Start “Local Security Policy> Tools, or open the CMD command line prompt and type "secpol.msc&rdquo" ; ->Expand“Local Policies” -> Double click “User Rights Assignment> -> Ensure that the guest account's policy is <; Deny access to this computer from the network ( Deny Access To This Computer From The Network)”.
Step 4 Prevent the Guest account from shutting down the computer
The Guest account is at risk of obtaining unauthorized authorization once the computer is shut down or restarted. In order to prevent this, it is important to cancel the user rights of the Guest account <; Shut Down The System". The specific process is: select “Local Security Policy"–> Expand“Local Policies” ->Double click “User Rights Assignment”-> ; Make sure that the policy for the Guest account does not have "Shut Down The System" & rdquo;.
Step 5 Prevent Guest Account from Viewing Event Logs
Guest Account Another security principle is that viewing of event logs is not allowed. The specific process is: open the CMD command line prompt, type "ldedit", start “ Registry Editor (Registry Editor), and expand the HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesEventlog key. Here we mainly focus on three of them: Application, Security, System. Make sure these sub-health contains a REG_DWORD value. The name of REG_DWORD is RestrictGuestAccess, and the corresponding data value is 1.
Case Analysis
Xiao Wang wants to set up a Guest account, only to access the F disk, and the rest of the C, D, E disks can not be accessed, how to set up? It is forbidden to access the disk by the Guest account. The specific operation is as follows: right click on “Disk(Disk)” –> Click “Property” –> Then in “Security Tab&rdquo In the middle, click the “Edit” button. -> Click the “Add” button in the pop-up window. –> After entering Guest, click “Check Name” -> Click “OK(Ok)”Add Guest Account. Then give the Guest account full control of <;reject" permission.
The following error message will appear when the permission is in effect, please ignore these tips.
This guest account cannot access these disks.
It should be noted that since the guest account allows users to log in to the network, browse the Internet, and shut down the computer, it should be disabled when not in use.