Hi! I want to enable a guest account on all computers in my domain. I tried enabling local guest account and permitting the guest account in Security Policy, but it did not work. I enabled domain guest account and now I can log in as a guest. Is it safe? I also don't want any guest created files to be permanently saved to the computers (he logs in, browse the Internet or even create a Word document, but after he logs off I want all his stuff to disappear). Is it possible? Thank you.

One more thing: Is "DOMAIN\Guest" considered an Authenticated user? (no password set)

Hi, The “Domain/Guest” account can be considered as an Authenticated user. In previous operating system, you can try Windows SteadyState. However, the software cannot be installed on Windows 7. Based on my research, I'm afraid that you cannot use Windows 7 built-in system feature to archive the function. Thanks,Novak

Thank you for your answers.Novak, since I'm using Windows 7, I guess I won't be able to delete it. That's not a big deal, it would be a nice feature though. I will live without it :)technocrate, my computers are in domain, I have enabled guest accounts in GPO and checked that with Computer Management. Domain joined computers don't get that standard screen with Guest account (as you described in your post). For future reference:Windows Server 2008R2 says that by default Computer Configuration->Windows Settings->Security Settings->User Rights Assignments->Deny log on locally is empty. That isn't true, Windows 7 has a guest account there by default (I guess it would be removed if you enable the guest account BEFORE joining domain, but hey! Who does that?).Denied account produces:The user has not been granted the requested logon type at this machine. (event viewer after turning account auditing for unsuccessful logins)and displays:You cannot log on because the logon method you are using is not allowed on this computer. Please see you network administrator for more detailsto the user. This part was dedicated to the local guest account. Now to domain guest account: Do you guys use it? Is it safe? Is it possible to make a domain computer to log on local guest account automatically (when you enter "Administrator" in the user name, the domain is automatically changed from MYDOMAIN to COMPUTER. I need something similar for guest account)?Thank you all.

Hi, To answer your question, Domain/Guest account is safe to use. Usually, the account is used by the people who do not have an actual account in the domain. A user whose account is disabled (but not deleted) can also use the Guest account. The Guest account does not require a password. You can set rights and permissions for the Guest account just like any user account. By default, the Guest account is a member of the built-in Guests group and the Domain Guests global group, which allows a user to log on to a domain. The Guest account is disabled by default, and we recommend that it stay disabled. If you would like to create an account for someone, you can create a restricted account. For more information, please refer to the link below: Securing Active Directory Administrative Groups and Accounts Thanks,Novak