Guest accounts - Local or Domain or ???

[pseudo]

How do you handle any type of guest account access?

 

We have some high school students who are coming to check out our gaming lab. The instructor wants them to be able to use the machines for some demos.

 

Local Accounts, locked down domain account, don't do it?

[FN-GM]

Never use local accounts. Central management all the way!

[howartp]

Separate student-level domain account(s).

 

Student accounts are largely read-only apart from their own resources they create anyway, so there's not much they can do with them.

[Olliedawg]

Likewise to howartp's suggestion, I would create a domain user account with restrictions similar to what a student user account would have (no permissions to access any network drives, locked down OS etc..)

 

If the machines they are using are on WiFi, i would put them onto the Guest WiFi to just allow internet access.

 

I would maybe even go as far as to monitor what they are doing via some classroom management software (senso/abtutor etc.)

[LanSchoolSamson]

With LanSchool Classic, the student agent is installed at the system level for Windows and macOS devices. So anyone signed in as a Guest would be monitored.