Back
  • Misconfig Name
  • Built-in Guest Account is not disabled
  • Description
  • The ''Guest'' account allows anonymous access to a machine. This might serve as an attack vector to gain sensitive data or inflict damage to your systems. Making sure that this account is disabled will prevent people from using services you may have unintentionally left open.
  • Severity
  • Moderate
  • Category
  • User Account Management
  • Resolution
  • Follow the below steps in GPO to resolve the misconfiguration. Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> "Accounts: Guest account status" to "Disabled".
  • Reboot Required
  • No