Tuesday, March 27, 2018

Windows 10 Guest Account

Had some overseas guests staying with us, and realized that Windows 10 doesn't support guest accounts anymore. By guest account, I mean an account where you don't need to be authenticated, but can still use the PC and the internet. Not allowed to change any Windows settings though.

As far as I can tell, the guest account option is well and truly gone in Windows 10. There are lots of websites out there that tell you how to do it, but:

  • they either don't work and just mess up your OS, or
  • they're actually just a standard user account that is not as restrictive as the real guest account

If you're fine with option two, then read on.

1) Run Command Prompt as administrator.
2) Create a user account called Visitor. Can be any name as long as it's not Guest.
> net user Visitor /add /active:yes
3) Create a password for the Visitor account. Double-enter if you don't want to enter any password.
> net user Visitor *
4) Remove the Visitor account from the default Users group.
> net localgroup users Visitor /delete
5) Add the Visitor account to the Guests users group.
> net localgroup guest Visitor /add

To delete the Visitor user account, just go to Settings > Accounts, select the Visitor account and click Remove.

Now, apparently this does not actually give you a "real" restricted guest account, even though Visitor is part of the Guests user group. When you open up Computer Management, and read the description of the Guests user group, it says, "Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted." If that is true, then might as well create a local (non-Microsoft) standard user.

  1. Go to Settings > Accounts.
  2. Under Other people, click on "Add someone else to this PC"
  3. Scroll down and click on "I don't have this person's sign-in information"
  4. Again, scroll down and click on "Add a user without a Microsoft account"





No comments:

Post a Comment