MX User Manager

[deepestfishguy]

2019-05-16

I would like to set up a Guest account that would not require a password. Is it possible to do this? Are there risks involved in doing this, even if the Guest account is set up without any privileges?


>)))*>

[JayM]

2019-05-16

I would like to set up a Guest account that would not require a password. Is it possible to do this?

No. Passwords are required for user authentication.

Are there risks involved in doing this, even if the Guest account is set up without any privileges?

Yes, extreme risks. Letting an unverified, unvalidated account run at any privilege level would be a very bad thing, security-wise. That's why passwords are a system requirement and always have been in Linux, and in Unix before that.

Welcome to the forum.

[deepestfishguy]

Thanks so much for your speedy reply !!

[manyroads]

2019-05-16

I would like to set up a Guest account that would not require a password. Is it possible to do this? Are there risks involved in doing this, even if the Guest account is set up without any privileges?


>)))*>

Truly a bad idea... sorry.

[deepestfishguy]

I value your input . . . thanks for a quick reply . . . no need for me to think about this anymore !!

[deepestfishguy]

Not sure if it is protocol on this Form to indicate that an issue has been resolved . . . hopefully it is appropriate for me to do so. Cheers !!


>)))*>

[richb]

Not sure if it is protocol on this Form to indicate that an issue has been resolved . . . hopefully it is appropriate for me to do so. Cheers !!


>)))*>

It is. Add [Solved] to the title of your first post. The pencil at the right top of the post block will put you in editing mode.

[Vincent17]

Yes, extreme risks. Letting an unverified, unvalidated account run at any privilege level would be a very bad thing, security-wise.

For my education, could you elaborate?
Do you assume computer is accessible to strangers physically or via network?
Is autologin even worse?
Thanks for your patience.

[manyroads]

Yes, extreme risks. Letting an unverified, unvalidated account run at any privilege level would be a very bad thing, security-wise.

For my education, could you elaborate?
Do you assume computer is accessible to strangers physically or via network?
Is autologin even worse?
Thanks for your patience.

If your PC is plugged into any network... and you have an open account, anyone with access to that network has free and open access to your machine.

[j2mcgreg]

Vincent17 wrote:

For my education, could you elaborate?
Do you assume computer is accessible to strangers physically or via network?
Is autologin even worse?
Thanks for your patience.

You only have to look at the Windows platform to find your answer. Microsoft wanted Windows (especially the Home versions) to be as user friendly as possible. To that end they eschewed passwords early on in the consumer versions and also made passwords trivial to bypass on the business versions. They also gave their office suite kernel access. Then they rolled out a security protocol which was so strict that every home user had to be an Administrator. The effect of these four policies was to create an environment that enabled a plague of viruses and malware to occur.