Vista Guest Account Has Unrestricted Access to the Registry?
I enabled the Guest account on my Vista PC the other day and just for kicks decided to see exactly what the Guest account had access to. I tried to delete program files, etc. and each time I got a prompt to enter the Administrator password. Good so far. Then I type regedit in the Search bar and regedit comes upwith no UAC promptand I enter the registry with no problems whatsoever. I even edit the registry and the settings are saved! What's up with this? Is this just my computer? Can anyone else please confirm? If this is the case, then this is a serious flaw in Vista security and it needs to be patched immediately!!!
April 21st, 2008 3:23pm

Hi I am not seeing the same thing. What keys are you trying to modify or what actions are you performing? Do you have UAC turned off?
Free Windows Admin Tool Kit Click here and download it now
April 21st, 2008 8:55pm

No, I do not have UAC turned off. The point is, logged in as a Guest, I should get a UAC prompt before running Regedit.I even get a UAC prompt when I am logged in as an Administrator. I amNOT getting a UAC prompt when logged in as a Guest and I have unrestricted access to the registry, i.e. I can edit it and the edits are saved. This should not happen. Is there something wrong with my computer or is this an overlooked security glitch in Vista?
April 21st, 2008 10:22pm

Hi,Please run "gpedit.msc", then navigate to "Computer Configuration" - "Windwos Settings" - "Local Policies" - "Security Settings", check the UAC related settings, and make sure all of them are set properly. Then disable the guest account, restart the computer, enable it, theck whether it can access registry without UAC prompt.--------------------Regards,Eric Zhang
Free Windows Admin Tool Kit Click here and download it now
April 23rd, 2008 12:51pm

HI Eric, I'm not quite sure what you mean by UAC related settings? Could you be a little more specific? Also the navigation is a little off. It should be Computer Configuration - Windows Settings - Security Settings - Local Policies - then what? Audit Policy? User Rights Assignment? Security Options? Thanks for your help.
April 25th, 2008 5:12am

Hi,The UAC related settings are under Computer Configuration - Windows Settings - Security Settings - Local Policies -Security Options.User Account Control: Admin approve mode for built-in administrator account: Enable User Account Control: Allow UIAccess applications to prompt for elevation withou using secure desktop" EnableUser Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode: prompt for credentialsUser Account Control: Behavior of the elevation prompt for standard users: prompt for credentialsUser Account Control: Detect application installations and prompt for elevation: EnableUser Account Control: Only elevate executables that are signed and validated: DisableUser Account Control: Virtualizes file and registry write failures to per-user locations: EnableUser Account Control: Run all users, including administrators, as standard users: Enable--------------------Regards,Eric Zhang
Free Windows Admin Tool Kit Click here and download it now
April 25th, 2008 10:18am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics