Guest account Roaming Profile

Hi all,

Can anyone tell me how I can get the Guest account to use roaming profiles;
at the moment it just creates a new local one every time.

Thanks,
Nick

Lanwench
Tue Aug 12 08:17:56 PDT 2008

Nick <DuffAddy@CrapDomain.biz> wrote:
> Hi all,
>
> Can anyone tell me how I can get the Guest account to use roaming
> profiles; at the moment it just creates a new local one every time.
>
> Thanks,
> Nick

No - Guest is a special account and should always remain disabled, for
security reasons. You shouldn't need it. Set up a Visitor or Temp User
account for your purposes & configure it as you please.

Nick
Tue Aug 12 08:44:45 PDT 2008

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:eMZWb8I$IHA.984@TK2MSFTNGP06.phx.gbl...
> Nick <DuffAddy@CrapDomain.biz> wrote:
>> Hi all,
>>
>> Can anyone tell me how I can get the Guest account to use roaming
>> profiles; at the moment it just creates a new local one every time.
>>
>> Thanks,
>> Nick
>
> No - Guest is a special account and should always remain disabled, for
> security reasons. You shouldn't need it. Set up a Visitor or Temp User
> account for your purposes & configure it as you please.

In which case what is the purpose of the Guest account?

Cliff
Tue Aug 12 10:09:57 PDT 2008

Nick,

You'll get different answers from different people...but here is my take:

The guest account is useful for *shockingly* ....guests. But you have to
remember that Windows, as an OS, is designed to be used in a wide variety of
environments. The guest account, specifically, is useful for standalone
machines and workgroup scenarios. In a domain environment though, its
'local' nature makes it a security risk and, therefore, I agree with
Lanwench. It should be disabled. That should answer why it exists AND why
it should be disabled. Since this is an SBS newsgroup, we are inherently
talking about a domain environment.

As far as your actual question, there is no way that I'm aware of to make
any local account roam. Only domain accounts do this, as it is a setting in
AD. You could enforce a mandatory profile, but it is probably better to go
the temp user route where control is more centralized.

-Cliff

"Nick" <DuffAddy@CrapDomain.biz> wrote in message
news:ukH4ZJJ$IHA.1296@TK2MSFTNGP02.phx.gbl...
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:eMZWb8I$IHA.984@TK2MSFTNGP06.phx.gbl...
>> Nick <DuffAddy@CrapDomain.biz> wrote:
>>> Hi all,
>>>
>>> Can anyone tell me how I can get the Guest account to use roaming
>>> profiles; at the moment it just creates a new local one every time.
>>>
>>> Thanks,
>>> Nick
>>
>> No - Guest is a special account and should always remain disabled, for
>> security reasons. You shouldn't need it. Set up a Visitor or Temp User
>> account for your purposes & configure it as you please.
>
> In which case what is the purpose of the Guest account?
>

Nick
Tue Aug 12 12:33:03 PDT 2008

Thx Cliff, in that case I will go with creating a 'Visitor' account and
disable Guest again.

Nick


"Cliff Galiher" <cgaliher@gmail.com> wrote in message
news:zMqdnU-MJt17XjzVnZ2dnUVZ_oPinZ2d@bresnan.com...
> Nick,
>
> You'll get different answers from different people...but here is my take:
>
> The guest account is useful for *shockingly* ....guests. But you have to
> remember that Windows, as an OS, is designed to be used in a wide variety
> of environments. The guest account, specifically, is useful for
> standalone machines and workgroup scenarios. In a domain environment
> though, its 'local' nature makes it a security risk and, therefore, I
> agree with Lanwench. It should be disabled. That should answer why it
> exists AND why it should be disabled. Since this is an SBS newsgroup, we
> are inherently talking about a domain environment.
>
> As far as your actual question, there is no way that I'm aware of to make
> any local account roam. Only domain accounts do this, as it is a setting
> in AD. You could enforce a mandatory profile, but it is probably better
> to go the temp user route where control is more centralized.
>
> -Cliff
>
> "Nick" <DuffAddy@CrapDomain.biz> wrote in message
> news:ukH4ZJJ$IHA.1296@TK2MSFTNGP02.phx.gbl...
>> "Lanwench [MVP - Exchange]"
>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
>> message news:eMZWb8I$IHA.984@TK2MSFTNGP06.phx.gbl...
>>> Nick <DuffAddy@CrapDomain.biz> wrote:
>>>> Hi all,
>>>>
>>>> Can anyone tell me how I can get the Guest account to use roaming
>>>> profiles; at the moment it just creates a new local one every time.
>>>>
>>>> Thanks,
>>>> Nick
>>>
>>> No - Guest is a special account and should always remain disabled, for
>>> security reasons. You shouldn't need it. Set up a Visitor or Temp User
>>> account for your purposes & configure it as you please.
>>
>> In which case what is the purpose of the Guest account?
>>
>

Lanwench
Tue Aug 12 08:59:45 PDT 2008

Nick <DuffAddy@CrapDomain.biz> wrote:
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:eMZWb8I$IHA.984@TK2MSFTNGP06.phx.gbl...
>> Nick <DuffAddy@CrapDomain.biz> wrote:
>>> Hi all,
>>>
>>> Can anyone tell me how I can get the Guest account to use roaming
>>> profiles; at the moment it just creates a new local one every time.
>>>
>>> Thanks,
>>> Nick
>>
>> No - Guest is a special account and should always remain disabled,
>> for security reasons. You shouldn't need it. Set up a Visitor or
>> Temp User account for your purposes & configure it as you please.
>
> In which case what is the purpose of the Guest account?

If you don't care about authenticating users who will access resources.
You'd find it in use more often in a simple workgroup environment. It can be
exploited so it's best to leave it disabled, as it is by default.