DOCUMENT:Q102741 08-AUG-2001 [winnt] TITLE :Windows NT Guest Account vs. Macintosh Guest Account PRODUCT :Microsoft Windows NT PROD/VER:3.1 4.0 OPER/SYS: KEYWORDS:kbinterop ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Windows NT Advanced Server, version 3.1 - Microsoft Windows NT Server version 4.0 ------------------------------------------------------------------------------- This articles discusses the differences between the guest account on a Windows NT Advanced Server running Services for Macintosh, and the Guest logon option that Macintosh users may choose when attempting to log on to a Windows NT Advanced Server running Services for Macintosh. The guest account on a Windows NT Advanced Server is different from the Guest logon option for Macintosh. When a Macintosh user attempts to log on to a Windows NT Advanced Server running Services for Macintosh, and that user selects the Guest option, that user is not logged on to the Windows NT Advanced Server as the guest account. MORE INFORMATION ================ When a Macintosh user selects the Guest option during logon, the MacFile Control Panel reports the following when displaying the Users connected: Connected Users Computers In this case, the Macintosh is not logged with any user account the Windows NT Advanced Server has. When a Macintosh user selects the Registered User option and uses the user name "Guest," the MacFile Control Panel reports the following when displaying the Users connected: Connected Users Computers In this case, the Macintosh is logged on to the Windows NT Advanced Server as that computer's guest, and therefore has the permissions of the guest account. The difference, as displayed, is the missing greater-than and less-than (">" and "<") signs. The difference, effectually, is that the Macintosh Guest is not the same as the guest account; they are similar in name only. To disable a Macintosh user from logging on to the Windows NT Advanced Server as a Guest (as opposed to as the guest account), the Allow Guests To Logon check box in the Security box of the MacFile Attributes dialog box must be clear (that is, not checked). To disable a Macintosh user from logging on to the Windows NT Advanced Server as the guest account, the guest account itself must be disabled. This makes it so no user, from any computer, can use the guest account. Another option to deny the guest account access from a Macintosh is to limit the guest account to log on only from certain named computers. This can be done in the Logon From box, which can be accessed by choosing User Properties from the User Manager. The permissions of the guest account is set by the User Manager. The permissions for the guest logon option is dependent upon the Everyone setting under Permissions from the MacFile menu in File Manager. Note that the Macintosh permission structure differs from the Windows NT permission structure. Additional query words: sfm prodnt ====================================================================== Keywords : kbinterop Technology : kbWinNTsearch kbWinNT400search kbWinNTSsearch kbWinNTS400search kbWinNTS400 kbWinNTAdvSerSearch kbWinNTAdvServ310 kbWinNT310Search Version : 3.1 4.0 ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 2001.