1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Files in my user account can be accessed from guest user account in VISTA

Discussion in 'Windows Vista' started by wuverton, Mar 1, 2009.

Thread Status:
Not open for further replies.
Advertisement
  1. wuverton

    wuverton Thread Starter

    Joined:
    Sep 19, 2003
    Messages:
    20
    My folders and files in C:/users/myname/ can be viewed and accessed from the Guest user account. How do I stop this?
     
  2. AKAJohnDoe

    AKAJohnDoe

    Joined:
    Jun 5, 2007
    Messages:
    1,320
    Disable the Guest Account. If you need additional accounts, create them explicitly.
     
  3. switchbladecross

    switchbladecross

    Joined:
    Jul 17, 2006
    Messages:
    4
    It is odd that the Guest account would have access to the data of another user. It is possible that some how the "Everyone" group may have been added to the control list of your user folder, or that the Guest account was added to the local Administrators group. If that is the case, then this would explain why the Guest account *** access to your data.

    I would check the DACL of your user profile folder and the group membership of the Guest account. If this proves ineffective, I would disable the Guest account, delete the user profile folder and then re-enable it.
     
  4. TheOutcaste

    TheOutcaste

    Joined:
    Aug 7, 2007
    Messages:
    9,028
    switchbladecross is on the right track.
    At some point while in the Guest account, you granted them access to your user folder. When you do that, it's permanent, not just for that session. When you grant access, that user gets added to the permissions list.

    Just remove the Guest account from the permissions list on your user folder.
    Best to do this from the account you want to remove Guest access from.

    There will be some UAC prompts, just continue.
    Navigate to C:\Users\Username, where Username is the name of your user folder.
    Right click the folder, click Properties
    Click the Security tab. (If you are signed in with another account, you'll need to click Continue to gain access to the Security tab)
    If needed, click Edit under the list of names.
    Highlight Guest, Double check that it's Guest that is highlighted, and click Remove.
    You'll get a series of error pop ups, Error Applying Security on various folders, just click Continue.
    Click OK back to the desktop.
    When you return to the Security tab, the Guest account may still be shown. It won't be removed from the list until you re-open the properties window.

    Something to keep in mind when granting permissions.

    HTH

    Jerry
     
  5. wuverton

    wuverton Thread Starter

    Joined:
    Sep 19, 2003
    Messages:
    20
    All - Thanks for your help.

    I created a new standard user account and it does not show the files in my user account.

    I recall now that I was in the guest account and wanted to see a file in my user account. So I granted access to my user account. It never occurred to me that access might be permanent, and not be just for that session.

    I was also able to remove access to my user account in my original guest account by using the procedure posted by Jerry. BTW, Jerry, thanks for the detailed description and the heads-up about "Error Applying Security" pop ups.

    I also want to restrict access to some applications to just my account. I assume this can be done with some variation of the procedure posted by Jerry, but I have not found the right path yet. Any guidance would be appreciated.
     
  6. TheOutcaste

    TheOutcaste

    Joined:
    Aug 7, 2007
    Messages:
    9,028
    If the program appears on the Start Menu for all users, you can move it's Program Group folder so it only appears on your account. Won't stop anyone from creating a new shortcut though, or starting the program directly, but out of sight is sometimes all that's needed.

    Easy to block standard users, just remove the Users and Authenticated Users from the permissions list. Standard users can't take ownership or change permissions, so that will effectively block them.

    I haven't found a way to prevent other Computer Administrator accounts from accessing an item, as it seems they can always take ownership of an object. Even denying the Take Ownership right to the Administrators group on an object doesn't seem to work. So you can make it difficult to access a file/folder, but not impossible.

    Hopefully someone else has an easy answer.

    Jerry
     
  7. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Similar Threads - Files user account
  1. Tyler13jack
    Replies:
    14
    Views:
    530
  2. puppylover
    Replies:
    3
    Views:
    335
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/805452

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice