WinSecWiki > Security Settings > Local Policies > Security Options > Accounts > Guest account status
Accounts: Guest account status
With this setting you can disable the built-in Guest account on all computers where the group policy object is applied.
An administrator can temporarily override this setting by resetting the Disabled check box on the accounts properties, but upon the next application of group policy, Windows will return the account the status indicated by this policy – provided Group Policy’s Security policy processing is configured to reapply policies even if they haven’t changed.
This policy DOES affect the built-in Guest domain account in Active Directory if the policy is enabled at the root of the domain in Default Domain Policy. It has no affect if enabled in Default Domain Controllers Policy.
Bottom line
Enable this policy
Back to top