Windows 8 and 8.1 Forums

Set guest account limits

  1. #1

    Set guest account limits


    I want to make an account that sets itself to delete all files that have been downloaded by the user on sign out, and when you next sign in it the default files are loaded in again, with no files downloaded or internet history saved etc., still there. I'm leaving on a trip for two months and want to let my family let my PC, but don't trust them as they are known to download stupid things.

      My System SpecsSystem Spec

  2. #2


    Posts : 151
    Win8 Pro


    If you're using Windows 8 Professional you can use the Group Policy Editor (Windows Key + R, type gpedit.msc) - use the filter function to comb through the policies you need - and you could also prevent them from downloading, making changes to the OS, etc. - this would be your most comprehensive solution.

    If you don't have Win Pro, or don't have the time to set policies, you could download something like CCleaner, it's free and easy to use, and set it to run at startup.
      My System SpecsSystem Spec

  3. #3


    Quote Originally Posted by lastof View Post
    If you're using Windows 8 Professional you can use the Group Policy Editor (Windows Key + R, type gpedit.msc) - use the filter function to comb through the policies you need - and you could also prevent them from downloading, making changes to the OS, etc. - this would be your most comprehensive solution.

    If you don't have Win Pro, or don't have the time to set policies, you could download something like CCleaner, it's free and easy to use, and set it to run at startup.
    I dont normally mess around with that kind of stuff, so I don't know what you mean by filtering functions. Is there a guide on the internet somewhere on how to do this kind of stuff, or could you sorta tell me what to filter etc.,.?
      My System SpecsSystem Spec

  4. #4


    Posts : 328
    Windows 8.1 (x64)


    The easiest way would be to create an image of your system before you leave. Save it on an external disk or maybe another partition of your HD, and once you're back... restore everything the way it was. Here are two free solutions :
    Macrium Reflect Free
    Paragon Backup & Recovery Free Edition - Overview

    There was a free application by Microsoft that did exactly what you want called Windows SteadyState (each time the PC is restarted it's resetted to a clean state, hence the name), but it has been discontinued. It was used on PCs in public places (internet cafes, universities, etc..). There's a similar software still available called Deep Freeze : http://www.faronics.com/fr/products/deep-freeze/ . It is a commercial product and unfortunately the period trial is only 30 days.

    Here is a thread on other alternatives though, there might be some free ones : Alternative for Deep Freeze? - Windows 7 Help Forums
    There's an interesting link in this thread that might be good, it is a Word document published by MS to replicate SteadyState with free tools : Download Creating a Steady State by Using Microsoft Technologies from Official Microsoft Download Center
      My System SpecsSystem Spec

  5. #5


    Posts : 151
    Win8 Pro


    Ben,

    Ok, sorry, I wasn't sure how in-depth you wanted to go. If you are worried about them changing preferences like the desktop background etc., those types of things will only be reflected in the guest account (or whatever account you create), called a profile. As long as they don't log into your account, nothing will effect your profile.

    Here's what I would do. If you simply want one account for the whole family to use, go to your control panel (Windows key + X > Control Panel > User Accounts) create an account called Family (or whatever) and make sure it is of type "Standard". Now, click on 'Change User Account Control Settings" and slide the bar to the highest setting (Always Notify) - this will force an account control prompt for a password (your admin account password, so make sure they don't have it) anytime they try to install, download, or make any changes to the computer.

    Now, this might be overkill, but, first log into the account that you just created. Go into Internet Explorer options. I use Firefox, so I'm working off memory here, but if you go through the options, there should be a toggle for "Delete History on IE exit" make sure it's on. Then go to the Security tab. Drag the slider to High or Medium High. Go to the Privacy tab and do the same. Also look for the pop-up blocker options and make sure this is on as well.

    I believe that the User Account control setting on high should be enough though. You can try it out just to make sure. Log into your newly created account and browse around the Internet, try to download something and see what happens. You should be prompted for a password (which they won't have) and therefore will be prevented from downloading/installing anything dangerous.

    On a side note. You could log into the new account and install Chrome or Firefox. 99% of the malware out there only effects IE and after I got rid of it, I've never had one problem on any of my machines, incl., my kid's and wife's - who are not careful at all - and this is without any antivirus/malware protection/defender/firewall whatsoever. The only thing we run in the browser is "Adblock".

    If I'm off base as to your needs, let me know.
      My System SpecsSystem Spec

  6. #6


    Quote Originally Posted by lastof View Post
    Ben,

    Ok, sorry, I wasn't sure how in-depth you wanted to go. If you are worried about them changing preferences like the desktop background etc., those types of things will only be reflected in the guest account (or whatever account you create), called a profile. As long as they don't log into your account, nothing will effect your profile.

    Here's what I would do. If you simply want one account for the whole family to use, go to your control panel (Windows key + X > Control Panel > User Accounts) create an account called Family (or whatever) and make sure it is of type "Standard". Now, click on 'Change User Account Control Settings" and slide the bar to the highest setting (Always Notify) - this will force an account control prompt for a password (your admin account password, so make sure they don't have it) anytime they try to install, download, or make any changes to the computer.

    Now, this might be overkill, but, first log into the account that you just created. Go into Internet Explorer options. I use Firefox, so I'm working off memory here, but if you go through the options, there should be a toggle for "Delete History on IE exit" make sure it's on. Then go to the Security tab. Drag the slider to High or Medium High. Go to the Privacy tab and do the same. Also look for the pop-up blocker options and make sure this is on as well.

    I believe that the User Account control setting on high should be enough though. You can try it out just to make sure. Log into your newly created account and browse around the Internet, try to download something and see what happens. You should be prompted for a password (which they won't have) and therefore will be prevented from downloading/installing anything dangerous.

    On a side note. You could log into the new account and install Chrome or Firefox. 99% of the malware out there only effects IE and after I got rid of it, I've never had one problem on any of my machines, incl., my kid's and wife's - who are not careful at all - and this is without any antivirus/malware protection/defender/firewall whatsoever. The only thing we run in the browser is "Adblock".

    If I'm off base as to your needs, let me know.
    I don't want to go to that extent, since most of the time it will be my little brothers on it and they like to play PC games, so they will most likely want to download/install games. I just know that they also do stupid stuff and download viruses and get tons of ads and stuff like that, so I wanted to make it delete everything on log off so no virus or anything bad would stay.
      My System SpecsSystem Spec

  7. #7


    Posts : 151
    Win8 Pro


    Quote Originally Posted by bentek View Post
    Quote Originally Posted by lastof View Post
    Ben,

    Ok, sorry, I wasn't sure how in-depth you wanted to go. If you are worried about them changing preferences like the desktop background etc., those types of things will only be reflected in the guest account (or whatever account you create), called a profile. As long as they don't log into your account, nothing will effect your profile.

    Here's what I would do. If you simply want one account for the whole family to use, go to your control panel (Windows key + X > Control Panel > User Accounts) create an account called Family (or whatever) and make sure it is of type "Standard". Now, click on 'Change User Account Control Settings" and slide the bar to the highest setting (Always Notify) - this will force an account control prompt for a password (your admin account password, so make sure they don't have it) anytime they try to install, download, or make any changes to the computer.

    Now, this might be overkill, but, first log into the account that you just created. Go into Internet Explorer options. I use Firefox, so I'm working off memory here, but if you go through the options, there should be a toggle for "Delete History on IE exit" make sure it's on. Then go to the Security tab. Drag the slider to High or Medium High. Go to the Privacy tab and do the same. Also look for the pop-up blocker options and make sure this is on as well.

    I believe that the User Account control setting on high should be enough though. You can try it out just to make sure. Log into your newly created account and browse around the Internet, try to download something and see what happens. You should be prompted for a password (which they won't have) and therefore will be prevented from downloading/installing anything dangerous.

    On a side note. You could log into the new account and install Chrome or Firefox. 99% of the malware out there only effects IE and after I got rid of it, I've never had one problem on any of my machines, incl., my kid's and wife's - who are not careful at all - and this is without any antivirus/malware protection/defender/firewall whatsoever. The only thing we run in the browser is "Adblock".

    If I'm off base as to your needs, let me know.
    I don't want to go to that extent, since most of the time it will be my little brothers on it and they like to play PC games, so they will most likely want to download/install games. I just know that they also do stupid stuff and download viruses and get tons of ads and stuff like that, so I wanted to make it delete everything on log off so no virus or anything bad would stay.
    You can't do that. If they are able to download/install games, etc., then you are taking a risk - deleting the games,etc., after they logoff won't make a bit of difference as far as viruses go. The only way you can prevent viruses is either not allowing them to download/install in the first place, or, having an active antivirus/malware scanner running to scan the programs before they install them. If you allow them to install them, just deleting them upon logoff won't help as far as viruses go - it would be too late.

    If you do want them to be able to install games/apps/etc., then what you need is an antivirus program that is running in the background. Then when you return from your trip, you simply delete the user account and all the games/apps they installed along with it. Whatever preferences or settings they changed in their account won't effect yours - when you log in to your account, everything will look exactly the same because your account (user folders\preferences\shortcuts\background\etc) is all kept seperate in each user profile.

    If you are looking for free protection, the problem is it won't have a 'real-time' scanner, in other words, your little brothers would have to rt.click the file they download and choose 'scan' to remain safe. If you are willing to pay for an AV program, there are several all-in-one options that will have real-time protection, where you do nothing and they automatically detect and scan anything the user downloads, installs, or executes. However, unless you want something completely taking over your machine, stay away from Norton AV, it is complete bloatware and a total system hog IMO.

    For free:

    Malwarebytes | Free Anti-Malware Detection & Removal Software

    SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

    This all-in-one solution is my recommendation for AV\malware\spyware\adware:
    Antispyware, Antivirus, Endpoint Protection & Mobile Security | Webroot

    I would also install Adblock (its free, easy, and takes 2 seconds) - you won't even notice it's there, but it works wonders for ads\malware pop-ups:
    https://adblockplus.org/en/internet-explorer
      My System SpecsSystem Spec

  8. #8


    Posts : 328
    Windows 8.1 (x64)


    Most of the Group Policy features won't be accessible if you have a Home Edition, especially the ones interesting you. If you still want to try, all the steps necessary to do EXACTLY what you want are described here, on Microsoft's own website, like I previously posted :
    Creating a Steady State by Using Microsoft Technologies
    This includes configuring the account profiles, Group Policy, and System Restore. Everything is explained with details, and is doable with windows included tools (although you will need Windows Pro to enable most of the GP features needed)

    Don't count on AVs to completely block everything if your family goes wild on Internet, new viruses/malwares show up daily before the AVs get their signatures updated.
    The parental controls aren't foolproofed either for anyone a little bit knowledgeable or with access to google.
    If you have a Windows Home Edition, you could always try SRP which can be configured via the registry, but it might be difficult if you aren't tech savvy.

    Again, the easiest solution and by faaaaaar is to make an image of your system like I said in my first post. It's become THE main solution for restoring windows to a clean state for many users, not sure why you don't want to do that. It takes minutes and you are sure to be free of virus or whatever you family did during your absence, while they can do whatever they want. There's really no disadvantage.
    How to Backup and Restore Your Windows in 10 Minutes? - Windows - Applications
    A Guide to Disk Imaging, Backup and Restore Super User Blog
    v5: How to create a disk image (Backup, Image, v5)
    VIDEO TUTORIALS on how to use Acronis True Image 2014
    Last edited by oneeyed; 14 Jul 2014 at 23:50.
      My System SpecsSystem Spec

  9. #9


    Posts : 151
    Win8 Pro


    Quote Originally Posted by oneeyed View Post
    Most of the Group Policy features won't be accessible if you have a Home Edition, especially the ones interesting you.
    Don't count on AVs to completely block everything if your family goes wild on Internet, new viruses/malwares show up daily before the AVs get their signatures updated.
    The parental controls aren't foolproofed either for anyone a little bit knowledgeable of with access to google.
    If you have a Windows Home Edition, you could always try SRP which can be configured via the registry, but it might be difficult if you aren't tech savvy.

    Again, the easiest solution and by faaaaaar is to make an image of your system like I said in my first post. It's become THE main solution for restoring windows to a clean state for many users, not sure why you don't want to do that. It takes minutes and you are sure to be free of virus or whatever you family did during your absence, while they can do whatever they want. There's really no disadvantage.
    How to Backup and Restore Your Windows in 10 Minutes? - Windows - Applications
    A Guide to Disk Imaging, Backup and Restore Super User Blog
    v5: How to create a disk image (Backup, Image, v5)
    https://forum.acronis.com/forum/55960
    Ya, that's probably his best bet if they are kids who are just going to go wild. The problem is that while ben will be able to restore his machine back to what it was before, the kids will be left with a non-working machine should they just go nuts and start downloading free games/apps etc. without any protection.

    If the object is to provide something for the kids to be able to use, and be reasonably safe while doing so, this is what I would do:

    1. Follow oneeye's suggestion and make a disk image.
    2. Remove Internet Explorer and download Chrome or Firefox
    3. Install Adblock
    4. Install AV or Antimalware/spyware

    If you don't care that the machine could be rendered unuseable rather quickly, and simply want to be sure that you will be able to restore it to working order when you return, by all means, forego my suggestions and just do the disk image.
      My System SpecsSystem Spec

  10. #10


    Sounds like you need some kind of SandBox, so SandBoxie may do what tyou need: Sandboxie - Getting Started

    Sandboxie runs your applications in an isolated abstraction area called a sandbox. Under the supervision of Sandboxie, an application operates normally and at full speed, but can't effect permanent changes to your computer. Instead, the changes are effected only in the sandbox.
      My System SpecsSystem Spec

Page 1 of 2 12 LastLast
Set guest account limits
Related Threads
Hello all, My gf decided she wanted her admin account name changed on her Windows 8 machine from her first and last name. I edited her account name so that only her first name showed up. I used Netplwiz and everything seemed to go well. Upon rebooting the machine, somehow her guest account (which...
My kid uses Guest Account in Windows 8.1. The Family Safety seems unable to apply to the Guest Account, right? So I have to create another account with the Family Safety applied. But, my kid does not want to lose all game data in the Guest Account. How to move all the data from the Guest Account...
How do I set up a real Guest account? in User Accounts and Family Safety
I have just enabled the Guest account on my laptop with the idea that it is completely secure from my account but it isn't really working for me. It seems to act as any other account and remembers details of the previous log-on. Is there some way I can allow a Guest user to access internet,...
help - windows 8 account downgraded to guest account in User Accounts and Family Safety
please help me!! I bought a shiny new laptop yesterday with windows 8 pre-installed. After setting a few things up, i restarted the computer for the first time. At this time the computer downloaded many updates. On start up since my user account has been downgraded to a guest account. This...
My guest account is the admin in User Accounts and Family Safety
My guest account is the admin. I can't change it back. I use the built-in administrator but it says "error 5 occurred" " Access Denied". How can i change back to normal? I have two accounts, one is for me and the other is from my sister. She don't want to reset back completely because she...
Hi Do you use guest accout on your computer?? I mean, if Im the only user of the computer, does it make sense to use a guest account instead of administrators for surfing in internet? :huh:
Eight Forums Android App Eight Forums IOS App Follow us on Facebook