--- Forwarded Message from David Kanig <[log in to unmask]> ---

>Date: Wed, 29 Aug 2001 10:30:12 -0700
>To: [log in to unmask]
>From: David Kanig <[log in to unmask]>
>Subject: Win 2K config for Guest: writing profiles?

Problem, short: configure Windows 2000 machines in Lab for default
user Guest who cannot change the system.

Details: We have Windows 2000 machines for public use, some upgraded
from Win 98, some out of the box new with W2K Pro.  Logged on as
Administrator, I install applications, such as Office, and system
connectivity through Netware client service to a networked printer.
I install the appropriate driver for the printer.  I launch programs
and the first-use wizards appear and write profiles to the system
folder.  As Administrator, I am able to use applications and to print.

I want my default user to be Guest, a member of Users, whether
restricted or power.  Logging on as Guest, I launch Navigator, Word
or another application with a first-use wizard.  The wizard launches
and accepts data for a user profile.  On completion of data
collection the wizard announces the likes of, "Netscape.exe has
generated errors and will be closed by Windows."  A massive unhelpful
error log is generated.  Guest is unable to use any applications and
is denied access to the printer.  The prohibition of writing to the
system prevents Guest from creating profiles or accessing a networked
printer.

This attempted solution to provide Guest with profiles has not worked:

    1. As Administrator, assigning Guest to administrator status.
    2. As Guest, installing apps and connectivity.
    3. As Guest, successfully completing the first-use wizards and
writing profiles.
    4. As Administrator, lowering Guest to User.
    5. As Guest, launching an application.
    6. Win 2K runs first-use wizard, which fails to write a profile.
Apps cannot be used, Guest is denied access to printer.

This second attempt has not worked:

    1. As Administrator, installing apps and connectivity.
    2. As Administrator, copying Administrator profiles in system
directory to the All Users folder.
    2. As Guest, launching programs and telling the first-use wizards
to use the appropriate profile in All Users.
    3. Win 2K refuses to accept assignment of these profiles.

How can Guest create profiles if Guest is without permission to alter
the system?  Similarly, how can Guest with restricted privileges have
access to a networked printer?


David Kanig
Brown University