The information in this article applies to:
SYMPTOMSWhen you log on to a Windows 2000 Professional-based computer as a guest, you are able to view the security, profile, and group information of other users on the domain. CAUSEThis issue occurs because if the Guest account is enabled on a Windows 2000 Professional-based computer, any user logging onto the system as "Guest" is able to open "Local Users and Groups", expand the Users folder, and view the properties for other users. The Groups folder can also be expanded to show the membership of different groups. Although you cannot change any of these properties, they are still viewable, including a user's Group Membership and Profile Paths. RESOLUTIONTo resolve this issue, do not enable the Guest account on your Windows 2000 Professional-based computer. Also, if your Windows 2000 Professional-based computer is configured as a Member Server or Domain Controller, do not enable the Guest account or give the Guest account permission to log on locally. Note that while using the Guest account on a non-Domain Controller, you can open "Local Users and Groups", but the Users and Groups Folders does not expand for viewing. STATUSThis behavior is by design. MORE INFORMATIONThe Guest account is disabled by default on all Windows 2000 Server and Professional installations. Enabling the Guest account, or allowing the Guest account to log on locally to a Domain Controller, requires administrator action, and by requiring an administrator action to occur, is by design. Microsoft recommends leaving the Guest account disabled. To view "Local Users and Groups", right-click My Computer, click Manage, click Expand System Tools, and then click Expand Local Users And Groups. For related information, please see the following article in the Microsoft Knowledge Base: Q236374 Error Messages When Trying to Change User Properties Additional query words:
Keywords : kbtool kbui |
|
Last Reviewed: December 30, 1999 © 2000 Microsoft Corporation. All rights reserved. Terms of Use. |