Set guest account limits

bentek

New Member
Messages
3
I want to make an account that sets itself to delete all files that have been downloaded by the user on sign out, and when you next sign in it the default files are loaded in again, with no files downloaded or internet history saved etc., still there. I'm leaving on a trip for two months and want to let my family let my PC, but don't trust them as they are known to download stupid things.
 

My Computer

System One

  • OS
    8.1
If you're using Windows 8 Professional you can use the Group Policy Editor (Windows Key + R, type gpedit.msc) - use the filter function to comb through the policies you need - and you could also prevent them from downloading, making changes to the OS, etc. - this would be your most comprehensive solution.

If you don't have Win Pro, or don't have the time to set policies, you could download something like CCleaner, it's free and easy to use, and set it to run at startup.
 

My Computer

System One

  • OS
    Win8 Pro
If you're using Windows 8 Professional you can use the Group Policy Editor (Windows Key + R, type gpedit.msc) - use the filter function to comb through the policies you need - and you could also prevent them from downloading, making changes to the OS, etc. - this would be your most comprehensive solution.

If you don't have Win Pro, or don't have the time to set policies, you could download something like CCleaner, it's free and easy to use, and set it to run at startup.

I dont normally mess around with that kind of stuff, so I don't know what you mean by filtering functions. Is there a guide on the internet somewhere on how to do this kind of stuff, or could you sorta tell me what to filter etc.,.?
 

My Computer

System One

  • OS
    8.1
The easiest way would be to create an image of your system before you leave. Save it on an external disk or maybe another partition of your HD, and once you're back... restore everything the way it was. Here are two free solutions :
Macrium Reflect Free
Paragon Backup & Recovery Free Edition - Overview

There was a free application by Microsoft that did exactly what you want called Windows SteadyState (each time the PC is restarted it's resetted to a clean state, hence the name), but it has been discontinued. It was used on PCs in public places (internet cafes, universities, etc..). There's a similar software still available called Deep Freeze : http://www.faronics.com/fr/products/deep-freeze/ . It is a commercial product and unfortunately the period trial is only 30 days.

Here is a thread on other alternatives though, there might be some free ones : Alternative for Deep Freeze? - Windows 7 Help Forums
There's an interesting link in this thread that might be good, it is a Word document published by MS to replicate SteadyState with free tools : Download Creating a Steady State by Using Microsoft Technologies from Official Microsoft Download Center
 

My Computer

System One

  • OS
    Windows 8.1 (x64)
    Computer type
    PC/Desktop
Ben,

Ok, sorry, I wasn't sure how in-depth you wanted to go. If you are worried about them changing preferences like the desktop background etc., those types of things will only be reflected in the guest account (or whatever account you create), called a profile. As long as they don't log into your account, nothing will effect your profile.

Here's what I would do. If you simply want one account for the whole family to use, go to your control panel (Windows key + X > Control Panel > User Accounts) create an account called Family (or whatever) and make sure it is of type "Standard". Now, click on 'Change User Account Control Settings" and slide the bar to the highest setting (Always Notify) - this will force an account control prompt for a password (your admin account password, so make sure they don't have it) anytime they try to install, download, or make any changes to the computer.

Now, this might be overkill, but, first log into the account that you just created. Go into Internet Explorer options. I use Firefox, so I'm working off memory here, but if you go through the options, there should be a toggle for "Delete History on IE exit" make sure it's on. Then go to the Security tab. Drag the slider to High or Medium High. Go to the Privacy tab and do the same. Also look for the pop-up blocker options and make sure this is on as well.

I believe that the User Account control setting on high should be enough though. You can try it out just to make sure. Log into your newly created account and browse around the Internet, try to download something and see what happens. You should be prompted for a password (which they won't have) and therefore will be prevented from downloading/installing anything dangerous.

On a side note. You could log into the new account and install Chrome or Firefox. 99% of the malware out there only effects IE and after I got rid of it, I've never had one problem on any of my machines, incl., my kid's and wife's - who are not careful at all - and this is without any antivirus/malware protection/defender/firewall whatsoever. The only thing we run in the browser is "Adblock".

If I'm off base as to your needs, let me know.
 

My Computer

System One

  • OS
    Win8 Pro
Ben,

Ok, sorry, I wasn't sure how in-depth you wanted to go. If you are worried about them changing preferences like the desktop background etc., those types of things will only be reflected in the guest account (or whatever account you create), called a profile. As long as they don't log into your account, nothing will effect your profile.

Here's what I would do. If you simply want one account for the whole family to use, go to your control panel (Windows key + X > Control Panel > User Accounts) create an account called Family (or whatever) and make sure it is of type "Standard". Now, click on 'Change User Account Control Settings" and slide the bar to the highest setting (Always Notify) - this will force an account control prompt for a password (your admin account password, so make sure they don't have it) anytime they try to install, download, or make any changes to the computer.

Now, this might be overkill, but, first log into the account that you just created. Go into Internet Explorer options. I use Firefox, so I'm working off memory here, but if you go through the options, there should be a toggle for "Delete History on IE exit" make sure it's on. Then go to the Security tab. Drag the slider to High or Medium High. Go to the Privacy tab and do the same. Also look for the pop-up blocker options and make sure this is on as well.

I believe that the User Account control setting on high should be enough though. You can try it out just to make sure. Log into your newly created account and browse around the Internet, try to download something and see what happens. You should be prompted for a password (which they won't have) and therefore will be prevented from downloading/installing anything dangerous.

On a side note. You could log into the new account and install Chrome or Firefox. 99% of the malware out there only effects IE and after I got rid of it, I've never had one problem on any of my machines, incl., my kid's and wife's - who are not careful at all - and this is without any antivirus/malware protection/defender/firewall whatsoever. The only thing we run in the browser is "Adblock".

If I'm off base as to your needs, let me know.

I don't want to go to that extent, since most of the time it will be my little brothers on it and they like to play PC games, so they will most likely want to download/install games. I just know that they also do stupid stuff and download viruses and get tons of ads and stuff like that, so I wanted to make it delete everything on log off so no virus or anything bad would stay.
 

My Computer

System One

  • OS
    8.1
Ben,

Ok, sorry, I wasn't sure how in-depth you wanted to go. If you are worried about them changing preferences like the desktop background etc., those types of things will only be reflected in the guest account (or whatever account you create), called a profile. As long as they don't log into your account, nothing will effect your profile.

Here's what I would do. If you simply want one account for the whole family to use, go to your control panel (Windows key + X > Control Panel > User Accounts) create an account called Family (or whatever) and make sure it is of type "Standard". Now, click on 'Change User Account Control Settings" and slide the bar to the highest setting (Always Notify) - this will force an account control prompt for a password (your admin account password, so make sure they don't have it) anytime they try to install, download, or make any changes to the computer.

Now, this might be overkill, but, first log into the account that you just created. Go into Internet Explorer options. I use Firefox, so I'm working off memory here, but if you go through the options, there should be a toggle for "Delete History on IE exit" make sure it's on. Then go to the Security tab. Drag the slider to High or Medium High. Go to the Privacy tab and do the same. Also look for the pop-up blocker options and make sure this is on as well.

I believe that the User Account control setting on high should be enough though. You can try it out just to make sure. Log into your newly created account and browse around the Internet, try to download something and see what happens. You should be prompted for a password (which they won't have) and therefore will be prevented from downloading/installing anything dangerous.

On a side note. You could log into the new account and install Chrome or Firefox. 99% of the malware out there only effects IE and after I got rid of it, I've never had one problem on any of my machines, incl., my kid's and wife's - who are not careful at all - and this is without any antivirus/malware protection/defender/firewall whatsoever. The only thing we run in the browser is "Adblock".

If I'm off base as to your needs, let me know.

I don't want to go to that extent, since most of the time it will be my little brothers on it and they like to play PC games, so they will most likely want to download/install games. I just know that they also do stupid stuff and download viruses and get tons of ads and stuff like that, so I wanted to make it delete everything on log off so no virus or anything bad would stay.

You can't do that. If they are able to download/install games, etc., then you are taking a risk - deleting the games,etc., after they logoff won't make a bit of difference as far as viruses go. The only way you can prevent viruses is either not allowing them to download/install in the first place, or, having an active antivirus/malware scanner running to scan the programs before they install them. If you allow them to install them, just deleting them upon logoff won't help as far as viruses go - it would be too late.

If you do want them to be able to install games/apps/etc., then what you need is an antivirus program that is running in the background. Then when you return from your trip, you simply delete the user account and all the games/apps they installed along with it. Whatever preferences or settings they changed in their account won't effect yours - when you log in to your account, everything will look exactly the same because your account (user folders\preferences\shortcuts\background\etc) is all kept seperate in each user profile.

If you are looking for free protection, the problem is it won't have a 'real-time' scanner, in other words, your little brothers would have to rt.click the file they download and choose 'scan' to remain safe. If you are willing to pay for an AV program, there are several all-in-one options that will have real-time protection, where you do nothing and they automatically detect and scan anything the user downloads, installs, or executes. However, unless you want something completely taking over your machine, stay away from Norton AV, it is complete bloatware and a total system hog IMO.

For free:

Malwarebytes | Free Anti-Malware Detection & Removal Software

SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

This all-in-one solution is my recommendation for AV\malware\spyware\adware:
Antispyware, Antivirus, Endpoint Protection & Mobile Security | Webroot

I would also install Adblock (its free, easy, and takes 2 seconds) - you won't even notice it's there, but it works wonders for ads\malware pop-ups:
https://adblockplus.org/en/internet-explorer
 

My Computer

System One

  • OS
    Win8 Pro
Most of the Group Policy features won't be accessible if you have a Home Edition, especially the ones interesting you. If you still want to try, all the steps necessary to do EXACTLY what you want are described here, on Microsoft's own website, like I previously posted :
Creating a Steady State by Using Microsoft Technologies
This includes configuring the account profiles, Group Policy, and System Restore. Everything is explained with details, and is doable with windows included tools (although you will need Windows Pro to enable most of the GP features needed)

Don't count on AVs to completely block everything if your family goes wild on Internet, new viruses/malwares show up daily before the AVs get their signatures updated.
The parental controls aren't foolproofed either for anyone a little bit knowledgeable or with access to google.
If you have a Windows Home Edition, you could always try SRP which can be configured via the registry, but it might be difficult if you aren't tech savvy.

Again, the easiest solution and by faaaaaar is to make an image of your system like I said in my first post. It's become THE main solution for restoring windows to a clean state for many users, not sure why you don't want to do that. It takes minutes and you are sure to be free of virus or whatever you family did during your absence, while they can do whatever they want. There's really no disadvantage.
How to Backup and Restore Your Windows in 10 Minutes? - Windows - Applications
A Guide to Disk Imaging, Backup and Restore « Super User Blog
v5: How to create a disk image (Backup, Image, v5)
VIDEO TUTORIALS on how to use Acronis True Image 2014
 
Last edited:

My Computer

System One

  • OS
    Windows 8.1 (x64)
    Computer type
    PC/Desktop
Most of the Group Policy features won't be accessible if you have a Home Edition, especially the ones interesting you.
Don't count on AVs to completely block everything if your family goes wild on Internet, new viruses/malwares show up daily before the AVs get their signatures updated.
The parental controls aren't foolproofed either for anyone a little bit knowledgeable of with access to google.
If you have a Windows Home Edition, you could always try SRP which can be configured via the registry, but it might be difficult if you aren't tech savvy.

Again, the easiest solution and by faaaaaar is to make an image of your system like I said in my first post. It's become THE main solution for restoring windows to a clean state for many users, not sure why you don't want to do that. It takes minutes and you are sure to be free of virus or whatever you family did during your absence, while they can do whatever they want. There's really no disadvantage.
How to Backup and Restore Your Windows in 10 Minutes? - Windows - Applications
A Guide to Disk Imaging, Backup and Restore « Super User Blog
v5: How to create a disk image (Backup, Image, v5)
https://forum.acronis.com/forum/55960

Ya, that's probably his best bet if they are kids who are just going to go wild. The problem is that while ben will be able to restore his machine back to what it was before, the kids will be left with a non-working machine should they just go nuts and start downloading free games/apps etc. without any protection.

If the object is to provide something for the kids to be able to use, and be reasonably safe while doing so, this is what I would do:

1. Follow oneeye's suggestion and make a disk image.
2. Remove Internet Explorer and download Chrome or Firefox
3. Install Adblock
4. Install AV or Antimalware/spyware

If you don't care that the machine could be rendered unuseable rather quickly, and simply want to be sure that you will be able to restore it to working order when you return, by all means, forego my suggestions and just do the disk image.
 

My Computer

System One

  • OS
    Win8 Pro
Sounds like you need some kind of SandBox, so SandBoxie may do what tyou need: Sandboxie - Getting Started

Sandboxie runs your applications in an isolated abstraction area called a sandbox. Under the supervision of Sandboxie, an application operates normally and at full speed, but can't effect permanent changes to your computer. Instead, the changes are effected only in the sandbox.
 

My Computer

System One

  • OS
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Lenovo IdeaCenter K450
    CPU
    Intel Quad Core i7-4770 @ 3.4Ghz
    Motherboard
    Lenovo
    Memory
    16.0GB PC3-12800 DDR3 SDRAM 1600 MHz
    Graphics Card(s)
    Intel Integrated HD Graphics
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    HP h2207
    Screen Resolution
    1680x1050@59Hz
    Hard Drives
    250GB Samsung EVO SATA-3 SSD;
    2TB Seagate ST2000DM001 SATA-2;
    1.5TB Seagate ST3150041AS SATA
    PSU
    500W
    Keyboard
    Wired USB
    Mouse
    Wired USB
    Internet Speed
    3GB Up, 30GB Down
    Browser
    SeaMonkey
    Antivirus
    Windows Defender; MBAM Pro
    Other Info
    UEFI/GPT
    PLDS DVD-RW DH16AERSH
If you are looking into a product like steady state I would recommend Deep Freeze and Rollback RX or a freeware product like Reboot Restore RX. I am not a big fan of Steady State because steady state only recovers system files for instance Rollback can recover everything from system files to personal files on the desktop.
 

My Computer

System One

  • OS
    windows xp
Back
Top