Guest Account Able to View Security Information for other Users (235319)


The information in this article applies to:

  • Microsoft Windows 2000 Professional
This article was previously published under Q235319

SYMPTOMS

When you log on to a Windows 2000 Professional-based computer as a guest, you are able to view the security, profile, and group information of other users on the domain.

CAUSE

This issue occurs because if the Guest account is enabled on a Windows 2000 Professional-based computer, any user logging onto the system as "Guest" is able to open "Local Users and Groups", expand the Users folder, and view the properties for other users. The Groups folder can also be expanded to show the membership of different groups. Although you cannot change any of these properties, they are still viewable, including a user's Group Membership and Profile Paths.

RESOLUTION

To resolve this issue, do not enable the Guest account on your Windows 2000 Professional-based computer. Also, if your Windows 2000 Professional-based computer is configured as a Member Server or Domain Controller, do not enable the Guest account or give the Guest account permission to log on locally. Note that while using the Guest account on a non-Domain Controller, you can open "Local Users and Groups", but the Users and Groups Folders does not expand for viewing.

STATUS

This behavior is by design.

MORE INFORMATION

The Guest account is disabled by default on all Windows 2000 Server and Professional installations. Enabling the Guest account, or allowing the Guest account to log on locally to a Domain Controller, requires administrator action, and by requiring an administrator action to occur, is by design. Microsoft recommends leaving the Guest account disabled. To view "Local Users and Groups", right-click My Computer, click Manage, click Expand System Tools, and then click Expand Local Users And Groups. For related information, please see the following article in the Microsoft Knowledge Base:

236374 Error Messages When Trying to Change User Properties

Modification Type:MajorLast Reviewed:9/23/2003
Keywords:kbprb kbui KB235319
©2003 Microsoft Corporation. All rights reserved.