Use the Guest account in the system to improve the efficiency of intranet control

In order to facilitate access to the system, the Windows system has a built-in Guest account, but the account is also easy to cause security troubles. For this reason, the new version of the Windows system has closed the account without exception. In fact, in an intranet environment where one person controls multiple computers or has a very small network size, the Internet users are not very complicated. At this time, using the Guest account can improve the efficiency of the internal network control. Now, this article uses the Windows Vista system as the operating blueprint, and contributes three friends to use the Guest account to control the intranet. I hope everyone can benefit from it!

1. Improve sharing access efficiency

Whether it is accessing shared folders on the LAN or accessing network printers, we often encounter such troubles. Each time we share a access operation, we must access the host system where the shared resources are located, each time accessing the target host. Enter the shared access account and password once in the system. Obviously, this is a very troublesome thing for friends who are not familiar with network access operations, which will seriously affect their sharing access efficiency.

The main reason for this trouble is that the Windows system takes into account the security factor. In the default state, the startup and running status of the Guest account is closed, so that the Windows system cannot directly share the resources with the Guest account. Access, at this time each time a shared access operation is performed, the system screen will automatically pop up a password input dialog box.

In fact, in some small intranet environments with only two or three workstations, the Guest account is subtly activated to allow access to shared folders or network printers without entering a shared account name and password. Access can be directly achieved, which can greatly improve the efficiency of shared access. To allow the Windows system to automatically complete the shared access login operation with the Guest account, we can set up the Windows system as follows:

First enable the Guest account. Since the Guest account has been closed by default, we must first enable the system account; when enabling the account, click the "Start" /"Settings" /"Control Panel" command, in the pop-up In the system control panel window, double-click the "User Account" icon in the window, and then click the "User Account" /"Manage Other Accounts" option in the window that appears; select from the "Select the account you want to change" list. If there is no Guest account enabled, double-click the account icon with the mouse to open the settings window and click the “Open” button. As a result, the Guest account in the system can be started successfully.

Secondly, network access is allowed. In order to ensure the security of the local workstation, the Windows system prohibits the Guest account from accessing the Internet through the network by default. For this reason, we also need to set the relevant parameters in the host system where the shared resource is located, so that it allows the Guest account to pass through the network. For shared access; when doing this setup operation, we can click the "Start" /"Run" command, in the pop-up system run dialog box, enter the group policy edit command "gpedit.msc", click Enter After the key, enter the group policy console window of the corresponding host system; in the display area on the left side of the console window, click "Computer Settings" /"Windows Settings" /"Security Settings" /"Local Policies" /" User Rights Assignment branch option, right-click the "Access this computer from the network" group policy item under the target branch option, and execute the "Properties" command in the right-click menu to open the settings dialog;

Click the "Add User or Group" button in the dialog box to open the User Selection dialog box, select the Guest account and click OK "button, the host system where the shared resource target that way in the future will be able to allow the Guest account, direct access shared files on the local system folder or network printer via a network.

The following is the authorization for the Guest account. The target shared folder or network printer does not allow the Guest account to access by default. We only grant the appropriate access rights to the Guest account to ensure the successful access operation. It is very simple to authorize the Guest account. We can first enter the folder window where the shared resource is located, right click on the target shared resource icon, and click the "Properties" command from the pop-up shortcut menu to open the target shared resource. In the property setting dialog box, click the “Share” tab, and click the “Advanced Sharing” button in the corresponding tab settings page. In the advanced sharing dialog box that pops up, click the “Permissions” button to enter the permission setting window. Click the "Add" button in the settings window, select the Guest account from the pop-up account selection dialog box and click the "OK" button, then select the Guest account, and set "Read" or other control permissions for the account. In this way, the Guest account has the right to access the target shared resources in the future.

Finally, don't authenticate. The host system where the target shared resource is located will often perform authentication operations on any shared access user. In a trusted intranet working environment, we can set the Windows system to not authenticate the shared access user. In order to save time and improve the efficiency of shared access. To do this, we can follow the previous steps to enter the Group Policy Console window of the host system where the shared resource is located, and then expand "Computer Settings" /"Windows Settings" /"Security Settings" in the left sub-pane of the window. "/"Local Policy" /"Security Options" branch, double-click the "Network Access: Local Account Sharing and Security Model" option from the target branch, and select "Guest Only - Identity for Local Users" in the subsequent settings interface Verify that the identity is a guest option, and then click the OK button, so that the Windows system will not authenticate the shared access user in the future.

After completing the above setting tasks, when we access the shared folder or network printer on the intranet again through the network, it is as convenient as accessing the local folder or printer, without having to do it each time. Enter the access account and password, obviously this can greatly improve the efficiency of shared access.

2, improve remote shutdown efficiency

In the internal network environment, some people may have to manage or operate several workstations at the same time, do not need to talk about other management operations, even a simple shutdown operation If the work is carried out one by one, the workload is not small. In order to improve the remote shutdown efficiency, we can give the Guest account remote shutdown permission, so that the network administrator can quickly perform the remote shutdown operation directly in the local, the effect is almost the same as the local shutdown, the following is the specific setting operation of the fast remote shutdown:

First, enable the Guest account to be run in the computer system to be controlled, and set the permissions for the account to allow access to the target computer through the network. The specific setting process is not repeated here;

Secondly set the remote shutdown permission. In the default state, the Windows system prohibits the Guest account from remotely shutting down itself through the network. To do this, we need to enable this permission to ensure that the network administrator can directly perform the remote shutdown operation with the Guest account. When setting the remote shutdown permission, first open the Group Policy Console window of the computer system to be controlled, in the display area on the left side of the window, click "Computer Settings" /"Windows Settings" /"Security Settings" /"Local" Policy /User Rights Assignment branch option, under the target branch option, find the "Forced shutdown from remote system" group policy project, and double-click the project with the mouse to open the settings dialog;

Click the dialog In the "Add User or Group" button, open the User Selection dialog box, select the Guest account and click the "OK" button, so that the Guest account has the right to remotely shut down the system.

Finally, perform a remote shutdown operation. If we want to perform a shutdown operation on other computer systems to be controlled in the intranet, you can open your own computer system, click the "Start" /"Run" command, and enter "In the system running dialog box that pops up" Cmd" string command, click the Enter key, switch the system to the MS-DOS command line window, execute the string command "shutdown /i" at the command prompt of the window to open the remote shutdown dialog; Br>

Click the "Add" button in the dialog box, from the remote computer selection dialog box that appears, select and add the target computer name to be controlled, and select the "Shutdown" option, then set Good warning shows the time and warning content, for example, set the warning time to "5", set the warning content to "Immediately shut down", and finally click the "OK" button, and the target computer system screen to be controlled will immediately A warning message "Immediately Shut Down" appears, the computer will be forcibly shut down after 5 seconds, and the entire shutdown process does not require any identity. Verification operation, obviously such remote shutdown efficiency is very high.

3, improve the efficiency of remote connection

Sometimes, in order to speed up the efficiency of remote desktop connection, we hope that the local system can quickly establish a connection with the remote computer with the Guest account, to do this, We just need to follow the steps below to set up:

First, enable the Guest account in the remote computer system, and set the permissions for the account to allow access to the target computer through the network. The specific setup process, this article The description will not be repeated here;

Secondly, the Guest account is granted remote control permission. Right-click the "Computer" icon on the desktop of the remote computer system, execute the "Manage" command from the pop-up shortcut menu, open the computer management window of the corresponding system; display the area on the left side of the management window, and then select "System" Tools /Local User and Group /User branch options, display the area to the right of the corresponding User branch option, right-click the Guest account that is already enabled, and execute Properties in the shortcut menu "Command, open the property setting dialog box of the Guest account; click the "Subordinate to" tab in the dialog box, open the label setting page, click the "Add" button, from the account selection dialog box that appears later, Select and add the "administrator" account, and then click the "OK" button to save the settings, so that the Guest account can control the remote computer with system administrator privileges in the future.

The following allows the Guest account to connect to the remote desktop. By default, the Windows system does not allow the Guest account to perform remote desktop connection operations. At this point, we can add remote desktop connection permissions to the account. In doing so, we can right-click the remote computer system. On the desktop, click the "Computer" icon, and click the "Properties" command in the right-click menu to open the property setting window of the corresponding system; in the task list area on the left side of the settings window, click the "Remote Settings" option to open the remote settings. Dialog box, click the "Select Remote User" button in the dialog box, click the "Add" button in the setting window that appears, select the Guest account and join it, and finally click the "OK" button, then The Guest account can access the remote computer system through the Remote Desktop Connection function in the future.