User - Groups problem Win 11 Pro
User - Groups problem Win 11 Pro
Hi!
Your first question on the forum is clear. I built a new computer from scratch, installed it with a European language version 24H2 and updated it with standard updates via Windows Update. It will function as a kiosk, but it doesn’t quite fit the needs of our historic society. Once fully installed, it will be offline and require manual updates. I have created the necessary users, an extra admin, and guest accounts that can log in. The guests are only allowed to search for information and retrieve printouts or access two files—one text and one photo.
I added a non-administrator group containing both people and standard users who add data, while guests consume data. However, restricting non-administrators also affected the standard users, so I attempted to create more strict local group permissions for guests, but I couldn’t set up such a group in MMC. No guest group was found there!
In lusrmgr.msc I created both user accounts and the guest users, placing the guests in the guests group. This group appears in lusrmgr, the computer management console, MMC, Gpedit, and netplwiz.
Are you missing any information? Also, when trying to use CoPilot, it suggested using the same method as for non-administrators.
Any advice on creating a snap-in in MMC for guests? Or is there another approach I should consider?
Thanks,
Bagtjesen
Hi, currently there are no special permissions beyond the usual ones. For each group, the default installation is used, and an extra admin account has been added to the adminstrators group. The same applies to the two guest accounts—one for left-handed and one for right-handed—both within the guests group.
The adjustments I attempted when testing non-administrator rights were fully reset by restoring the original registry file. After confirming, everything functioned as expected.
There are no issues with partitions, NTFS GPTs, or similar components. Following standard procedures, I performed overnight Xmemory tests; all partitions passed inspection. I verified that non-administrator settings operated correctly, though not as robustly as anticipated.
Why would a user in both Administrators and Users groups (default setup) be impacted by non-administrator changes? Wouldn't an administrator override user group configurations?
Bagtjesen
Reviewing how permissions function for user accounts involved in several groups is essential. Understand that the strictest access rules take precedence.
Hey ex_bubblehead!
Just wanted to mention that I'll update the users and groups to resolve that issue. Still wondering why I can't locate the Guests user group and apply restrictions there. It seems non-administrators really impact standard users, and I need to distinguish between guests, regular users, and admins.
Bagtjesen