Standard user e-mail safety

Page 2 of 2 FirstFirst 12
  1. simrick's Avatar
    Posts : 15,923

    MeAndMyComputer said:
    Could a VPN be helpful in security purposes?
    If so I'll post in an appropriate forum for help and recommendations.
    A VPN would make no difference.
      My Computer

  2. Posts : 1,519
    Windows 10 Pro (32-bit) 16299.15

    Kari said:
    You could solve most of your issues simply by removing the standard account your users are using at the moment and creating a limited Guest account for them instead.
    There seems to be a feature from version 1607 onwards called 'SharedPC' mode, which can be setup on Windows 10 Pro /Education/ Enterprise machines.

    I think it's intended for machines which are dedicated to shared usage; once this mode is set it's harder for a non-guest user to use the machine for work:

    I had a quick play with it.

    One way to set up is via the Windows Configuration Designer

    Standard user e-mail safety-screenshot_229_a.png

    Once you've picked the desktop option, it's basically a case of setting one switch. I then went into Advanced mode to tweak some of the settings mentioned in the article, and created the provisioning package

    Standard user e-mail safety-screenshot_231_a.png

    Then I went into Windows on the machine which would be shared (a test virtual machine in my case) and applied the provisioning package- in my case I used a machine which was already in use rather than applying it at setup time.

    I would strongly suggest doing some backup images before this point, as I couldn't spot an easy way back from applying the provisioning package.

    Once I'd signed out, the login screen looks like this, which as you can see is a bit different.

    Standard user e-mail safety-capture.png

    Then when I pick Guest, it creates a new temporary account.

    Standard user e-mail safety-capture2.png

    Standard user e-mail safety-capture3.png

    One logged in, it looks pretty normal.

    Every time a Guest logs in, it seems to create a new account. Once signed off, there's no way to log back into that account. The article suggests you are very careful to let Maintenance run regularly on the machine, so it can delete the old accounts.

    I think a domain account will also work - in this case the user can log back in to something like where they left off, but inactive accounts will also get deleted by Maintenance after a time period which can be specified.

    It's not locked down as such, although you can restrict access to local drives from File Explorer and File | Save dialogs (for some reason the Downloads folder is left as the only visible one).

    There's a lot more to it than this - I've only scratched the surface.
    It won't fit everywhere, but it looks quite powerful if it fits the usage of that PC.
      My Computer

  3. dalchina's Avatar
    Posts : 24,330
    Win 10 Pro (1903)

    Interesting feature- introduced in 1607, but there seems hardly anything written up about it anywhere...
      My Computers

  4. simrick's Avatar
    Posts : 15,923

    @DavidY that looks like it needs a tutorial with a vid.
      My Computer


Related Threads
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 11:23.
Find Us

Windows 10 Forums