Win7 How to create a secure guest account

Sometimes, we may need to create a guest account, the so-called guest user, that can access the computer, but the permissions are limited. With regard to what is the Guest account, the official explanation given by Microsoft Windows 7 is that users can temporarily access your computer through the Guest account. People who use the Guest account cannot install software or hardware, change settings, or create passwords.

Unfortunately, the Guest account also opens the door for hacking. A netizen jokingly joked, "I opened the Guest account, 360 security guards gave me 87 points, closed the 100 points."

Therefore, how to ensure that the Guest account is enabled, but also to eliminate security risks? The purpose of this article is to teach you step-by-step how to create a safe guest account.

The first step is to enable the Guest account

By default, Windows 7 disables the Guest account and we need to enable it manually. The specific process is: Click "Computer Management (Computer Management)"-> "Local Users and Groups" –> Select the Users folder –> double-click Guest Account -> clear the account has been disabled Disabled check box –> click OK.

The second step is to set the security password for the Guest account

By default, the Guest account password for Windows 7 is blank. For security reasons, it is recommended that you set a password for this account. The specific process is: Select Local Users and groups (locals and Groups) –> Right-click Guest account-> select Set Password (set Password)-> pop-up warning, click "Continue (Proceed)" –> two times to enter a new password, two consecutive clicks "Confirm (OK)".

The third step is to prohibit the Guest account for network

One of the security principles of the Guest account is that it cannot be accessed by other computers. Otherwise, users of other computers on the network can log on to the computer using the guest identity. There are two ways to prohibit the guest account from being used on the network. To do this: Select the Administrative Tools menu –> launch the Local Security Policy (Policy) tool, or open the Cmd command-line prompt and administrative "secpol.msc"-> Expand Local Policies-> Double-click User Rights Assignment (users Rights Assignment)-> Ensure that the Guest account policy is deny access to the computer from the network (Deny access to this Co Mputer from the network) ".

Step fourth prohibits the guest account from shutting down the computer

Once the computer shuts down or restarts, the guest account is at risk of acquiring an illegal authorization. In order to eliminate this situation, it is important to cancel the Guest account "shut down the system" shut user rights. The specific procedure is: Select Local Security Policy (Policy) –> expand Local Policy (Locals Policies)-> Double-click User Rights Assignment (users Rights Assignment)-> Make sure that the Guest account policy does not "shut down the System" (shut).

Step fifth prohibit the guest account from viewing the event log

Guest account Another security principle is that the event log is not allowed to be viewed. The specific process is: Open the cmd command line prompt, typing "regedit", start the Registry Editor (Registry Editor), expand Hkey_local_ Machinesystemcurrentcontrolsetserviceseventlog key. Here we focus on three of these children: application, security, System. Make sure that these subkeys contain a REG_DWORD value. The REG_DWORD name is Restrictguestaccess, and the corresponding data value is 1.

Case analysis

Xiao Wang wants to set up a guest account, require only access to the F disk, the other C, D, e three disks can not access, how to set?

Xiao Wang is actually banning the guest account from accessing the disk by right-clicking "Disk" –> click on "Properties" –> and then, in the Security tab, click the "Edit" button. -> Click the "Add" button in the pop-up window. –> Enter guest and click "Check Name"-> click "OK" to add Guest account. The Guest account is then given full control of the Deny permission.

The following error prompts appear when the permission is in effect, please ignore these prompts.

So the guest account will not be able to access these disks.

It should be noted that because the Guest account allows a user to log on to the network, browse the Internet, and turn off the computer, it should be disabled when not in use.