1
  • I have a Microsoft account in my machine (Admin).

  • I set a guest account (Standard) for a friend so he can play games.

Is there any way he could access my files/folders info? I mean, get data, view photos, videos, docs...

I knew this could be done in other Windows versions, but I'm scared this could happen in Windows 10, too.

  • As a next step, consider asking on Superuser.SE about how to lockdown the Guest account from accessing certain files and folder paths. – WorseDoughnut Jun 21 '16 at 15:50
2

Is there any way he could access my files/folders info?

Yes, he could reboot from a live CD and then access your files directly, unless the drive is encrypted.

He could also attempt privilege escalation by leveraging any vulnerability within Windows 10 (such as this), or via any insecure configuration on your machine (e.g. overwriting a .exe that he has write permission to of which the administrator later executes).

Or he may be able to leave a USB stick in which acts as a network interface and directs your traffic through a device he controls. Usually all bets are off if there's physical access available.

This all depends of course on the skills and motivations of your "friend".

  • So, if I encrypt my drive, it would be safe whatever he does, right? – Franchojavilondo Jun 23 '16 at 14:16
  • 1
    He would need to be accessing your drive in an unencrypted state in order to use the computer in the first place (i.e. you unlock it for him), unless you were using some Windows equivalent of OSX's guest mode. – SilverlightFox Jun 26 '16 at 14:20
0

Yes, he can access those files but only if the guest account has permission to do so and some programs require administration rights to execute.

0

It depends on how you, the Administrator, have setup your files, and how you have set up their user permissions. As the administrator and system owner it is your responsibility to make sure that your system is set up in such a way that it is safe for you if they use it.

However if there are things you absolutely must keep confidential, those files should NOT be on that computer. They should be encrypted and on something only you can access(encrypted, password protected USB drive or a secure off site location). You should then probably avoid opening them on that computer if you're really that paranoid about them doing something to try and see them.

Remember if you keep that computer as safe as you're willing to have it, then he can only access what you're willing to let him access. There are plenty of tools and techniques to do so, but it is ultimately up to you to put those practices in place.

If you just want to keep them hidden you can encrypt the files. If you want him to not even be able to read you folder you need to setup those folders for your access only. If you don't want him to launch an application you need to limit user rights to that application. If you want.... That list goes on and on forever, but you get the idea. It's all pretty much up to you.

Here is another question you should probably ask yourself:

If there are things you don't want guest users on that computer to see, why are you letting them on that computer?

After all physical access is the greatest threat to any computer.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.