Microsoft KB Archive/235319

= Guest Account Able to View Security Information for other Users =

Article ID: 235319

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows 2000 Professional Edition

-



This article was previously published under Q235319



SYMPTOMS
When you log on to a Windows 2000 Professional-based computer as a guest, you are able to view the security, profile, and group information of other users on the domain.



CAUSE
This issue occurs because if the Guest account is enabled on a Windows 2000 Professional-based computer, any user logging onto the system as "Guest" is able to open "Local Users and Groups", expand the Users folder, and view the properties for other users. The Groups folder can also be expanded to show the membership of different groups. Although you cannot change any of these properties, they are still viewable, including a user's Group Membership and Profile Paths.



RESOLUTION
To resolve this issue, do not enable the Guest account on your Windows 2000 Professional-based computer. Also, if your Windows 2000 Professional-based computer is configured as a Member Server or Domain Controller, do not enable the Guest account or give the Guest account permission to log on locally. Note that while using the Guest account on a non-Domain Controller, you can open "Local Users and Groups", but the Users and Groups Folders does not expand for viewing.



STATUS
This behavior is by design.



MORE INFORMATION
The Guest account is disabled by default on all Windows 2000 Server and Professional installations. Enabling the Guest account, or allowing the Guest account to log on locally to a Domain Controller, requires administrator action, and by requiring an administrator action to occur, is by design. Microsoft recommends leaving the Guest account disabled. To view "Local Users and Groups", right-click My Computer, click Manage, click Expand System Tools, and then click Expand Local Users And Groups. For related information, please see the following article in the Microsoft Knowledge Base:

236374 Error Messages When Trying to Change User Properties

Keywords: kbprb kbui KB235319

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.