Guest account Vs Standard user account in Windows 7?

View previous topic View next topic Go down

Guest account Vs Standard user account in Windows 7?

Post by Peace on 2/1/2011, 17:23

Afaik lua in Xp are more secure than a guest account but what about Win7?
What if we implemented these restriction http://technet.microsoft.com/en-us/magazine/ff687018.aspx on the guest account and then compared it with a sua (without srp or applocker) in Win7?
thanks

Peace
Member
Member

Posts : 18
Join date : 2011-01-02

View user profile

Back to top Go down

Re: Guest account Vs Standard user account in Windows 7?

Post by p2u on 2/1/2011, 20:08

The guest account is available for users with no assigned account on the computer. I'm not sure if that's what you really want.

Paul

p2u
Valued Member
Valued Member

Posts : 211
Join date : 2010-12-14

View user profile

Back to top Go down

Re: Guest account Vs Standard user account in Windows 7?

Post by Peace on 3/1/2011, 15:52

Mr Paul, which one are more secure in Win7, a guest account with restrictions implemented (see above link) or a sua?

(Xp, guest Vs lua discussions)
http://www.wilderssecurity.com/showthread.php?s=04d7dd503fe5a23f8e5c5a86079385f7&t=238511&highlight=guest+account+limited


Peace
Member
Member

Posts : 18
Join date : 2011-01-02

View user profile

Back to top Go down

Re: Guest account Vs Standard user account in Windows 7?

Post by p2u on 3/1/2011, 18:22

Peace wrote:Mr Paul, which one are more secure in Win7, a guest account with restrictions implemented (see above link) or a sua?
Although the "Guest" account seems safer, I would still avoid using it, especially permanently. Microsoft disables it for a reason.

A "User" is a member of the "Users group", which the administrator is supposed to control and is exactly what you see when you look at the groups membership. One of the members of the "User" group is the so-called "Authenticated User" (= any account that has been authenticated; i.e. logged in with credentials).

Now when you have enabled the "Guest" account, you will see that users who have logged on as "Guest" are members of the obscure "Everyone" group, but not members of "Users" or "Authenticated Users".

The differences between the Everyone, Users, and Authenticated Users groups are not so obvious from their group names. To make a long story short, the "Everyone" group is the least secure of these groups because it is what is says: it includes everyone and you cannot control who is in this group. Although I can't prove anything because this group is not too well documented, I would not want to run the risk of any null sessions and other built-in "features" and surprises. For secure NTFS permissions I can only recommend you use "Authenticated Users", and not "Everyone".

Paul

p2u
Valued Member
Valued Member

Posts : 211
Join date : 2010-12-14

View user profile

Back to top Go down

Re: Guest account Vs Standard user account in Windows 7?

Post by Peace on 4/1/2011, 15:30

Mr Paul, thank you for your informative reply and patience

Peace
Member
Member

Posts : 18
Join date : 2011-01-02

View user profile

Back to top Go down

Re: Guest account Vs Standard user account in Windows 7?

Post by Sponsored content


Sponsored content


Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum