Since the Windows system prohibits guest accounts from logging in from the network by default, we need to lift this restriction. The first thought is to use the group policy editor gpedit.msc. However, Windows 10 Home Edition does not have a Group Policy Editor. We first tried to copy and run the Windows 10 Professional Edition Group Policy Editor file with a USB flash drive. As a result, it did not work on Windows 10 Home Edition.
I had to lift the restriction by modifying the registry. 1.Win + R, run regedit to open the registry editor, and locate HKEY_LOCAL_MACHINE \ SECURITY. Because of permission restrictions, this entry cannot be expanded downwards under normal circumstances. 2. Modify HKEY_LOCAL_MACHINE \ SECURITY permissions. Right-click SECURITY and select "Permission (P) ..." from the pop-up menu
In the "Permissions of SECURITY" dialog box, select "Administrators" from the "Group or user names" list, and click the "Advanced" button;
Click "Administrators" in the "Permission Entry" list in the "Permission" tab of the "SECURITY Advanced Security Settings" dialog box, and click the "Edit" button;
In the "SECURITY Permission Items" dialog box is displayed as the basic permissions by default, click "Show Advanced Permissions";
Write down the permissions at this time: "Write DAC" and "Read Control" are selected, and others are not selected, in order to restore the default permissions in the future;
Select "Full Control" and click the "OK" button;
The access rights for "Administrators" in the "Group or user names" list in the "SECURITY Advanced Security Settings" dialog box become "Full Control", click the "OK" button, and click the "OK" button.
Close and reopen the regedit registry editor, navigate to HKEY_LOCAL_MACHINE \ SECURITY, and you can now expand down.
Locate HKEY_LOCAL_MACHINE \ SECURITY \ Policy \ Accounts, locate the item that starts with S-1-5 and ends with 501 (normally there is only one item that ends with 501, which means the SID of the Guest account). The name of this item varies from computer to computer. Different; continue to locate the ActSysAc item, right-click ActSysAc, select "Export (E)" from the pop-up menu, export the ActSysAc item to a file, such as D: \ guest.reg, close regedit registry editing Device.
Back up guest.reg as a file guest_bak.reg; open Guest.reg with Notepad, the original content is: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE \ SECURITY \ Policy \ Accounts \ S-1-5-21-1184931706-488772991 -4003727610-501 \ ActSysAc] @ = hex (0): 01,00,00,00 Modify it to: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE \ SECURITY \ Policy \ Accounts \ S-1-5-21-1184931706- 488772991-4003727610-501 \ ActSysAc] @ = hex (0): 42,00,00,00 Note: The above modification means adding the Guest to the "Access this computer from the network" and "Reject local login" lists, and from Remove from network access kiosk computer "list. Add the following to guest.reg: [HKEY_LOCAL_MACHINE \ SYSTEM \ ControlSet001 \ Control \ Lsa] "LimitBlankPasswordUse" = dword: 00000000 "restrictanonymous" = dword: 00000000 Explanation:
"restrictanonymous" = dword: 00000000 means to enable guest account. "LimitBlankPasswordUse" = dword: 00000000 means that disabling local accounts that use blank passwords only allows console login. The complete guest.reg content is as follows: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE \ SECURITY \ Policy \ Accounts \ S-1-5-21 -1184931706-488772991-4003727610-501 \ ActSysAc] @ = hex (0): 42,00,00,00 [HKEY_LOCAL_MACHINE \ SYSTEM \ ControlSet001 \ Control \ Lsa] "LimitBlankPasswordUse" = dword: 00000000 "restrictanonymous" = dword: 00000000
Save guest.reg and double-click to import the registry. Restore the default permissions of HKEY_LOCAL_MACHINE \ SECURITY. After restarting the computer, other computers in the domain network can now use the Guest identity to access the shared printer connected to this computer using Windows 10 Home Edition.