Object

Name:	Guest
Path:	CN=Guest,CN=Users,DC=adscribe,DC=com
Created:	10/10/2006
Modified:	10/10/2006
Original USN:	8195
Current USN:	8195
SID:	S-1-5-21-2034109091-298619056-3282043246-501
GUID:	{B647CF73-D833-40A1-8C62-D542049C5268}

General

Disabled:
Type:	Normal
Display name:
First name:
Last name:
Initials:
Description:	Built-in account for guest access to the computer/domain
Office:
Telephone:
Telephone(other):
E-mail:
Web-page:
Web-page(other):

Address

StreetAddress:
P.O.Box:
City:
State/Province:
Zip/PostalCode:
Country/Region:

Account

User logon name:
User logon name (pre-Windows 2000):	Guest
Primary Group:	Domain Guests
Member Of:	Guests
Log on to:	All computers
Account is locked out:
User must change password at next logon??:
User cannot change password:
Password never expired:
Store password using reversible encryption:
Account is disabled:
Smart card is required for interactive logon:
Account is trusted for delegation:
Account is sensitive and cannot be delegated:
Use DES encryption types for this account:
Do not require Kerberos preauthentication:
Account expires:
Account expiration date:

Logon hours

Day	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15	16	17	18	19	20	21	22	23	24
Sun
Mon
Tue
Wed
Thu
Fri
Sat

Dial-in

Allowed:
Verify caller ID:
Calling station ID(s):
Callback number:
Static ip address:
Static route:

Profile

Profile path:
Script Path:
Local path:
Connect to:

Telephones

Home:
Home(other):
Mobile:
Mobile(other):
Fax:
Fax(other):
IP phone:
IP phone(other):
Notes:

Organisation

Title:
Department:
Company:
Manager:
Direct reports:

Remote control

Enabled:
Require user permission:
View user session:
Interract user session:

Terminal service

Logon allowed:
Profile path:
Home drive:
Home directory:

COM+

Partition set:

Enviroment

Initial program:
Start in:
Connect client drives at logon:
Connect client printers at logon:
Default to main printer:

Session

End a disconnected session:
Active session limit:
Idle session limit:
When a session limit is reached or conection is broken:	disconnect from session
Allow reconnection:	from any client

Security

Owner:	BUILTIN\Administrators
Group:	BUILTIN\Administrators
Allow inheritable permissions from parent:

Security permissions

	Trustee	Allow	Access	Inhereted	Children
	NT AUTHORITY\SELF		Extended access rights		Change Password
	Everyone		Extended access rights		Change Password
	NT AUTHORITY\SELF		Extended access rights		Change Password
	Everyone		Extended access rights		Change Password
	NT AUTHORITY\Authenticated Users		Read the properties
	BUILTIN\Account Operators		Full control Modify owner Write permissions Read permissions Delete an object Extended access rights List a tree of objects Delete a tree of objects Write the properties Read the properties Validate property Enumerate an object Delete child object Create child object
	BUILTIN\Administrators		Full control Modify owner Write permissions Read permissions Delete an object Extended access rights List a tree of objects Delete a tree of objects Write the properties Read the properties Validate property Enumerate an object Delete child object Create child object
	NT AUTHORITY\SELF		Read the properties
	BUILTIN\Administrators		Modify owner Write permissions Read permissions Delete an object Extended access rights List a tree of objects Write the properties Read the properties Validate property Enumerate an object Create child object
	ADSCRIBE\Enterprise Admins		Full control Modify owner Write permissions Read permissions Delete an object Extended access rights List a tree of objects Delete a tree of objects Write the properties Read the properties Validate property Enumerate an object Delete child object Create child object
	BUILTIN\Pre-Windows 2000 Compatible Access		Enumerate an object
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Remote Access Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		General Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Group Membership
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Account Restrictions
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Logon Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read permissions List a tree of objects Read the properties Enumerate an object
	BUILTIN\Pre-Windows 2000 Compatible Access		Read permissions List a tree of objects Read the properties Enumerate an object
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Remote Access Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		General Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Group Membership
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Account Restrictions
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Logon Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read permissions List a tree of objects Read the properties Enumerate an object
	NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS		Read the properties		TokenGroups
	NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS		Read the properties		TokenGroups
	NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS		Read the properties		TokenGroups

Total: 27 security permission(s)

Audit permissions

	Trustee	Access	Inhereted	Children	Attribute
	Everyone	ADS_RIGHT_ACCESS_SYSTEM_SECURITY Write permissions Read permissions Delete an object
	Everyone	Write the properties		OrganizationalUnit	GPLink
	Everyone	Write the properties		OrganizationalUnit	GPOptions

Total: 3 audit permission(s)

See Also

List of users