Guest Account

Issue

The Guest account is intended for users who require temporary access to the system. However, if you enable this account, you can create a security risk because an unauthorized user could gain anonymous access to your system through this account.

Solution

Disable the Guest account. The Guest account is disabled by default in Microsoft® Windows® 2000, Windows XP, and Windows Server 2003.

Note

• If you are running Windows XP with simple file sharing enabled (maps incoming user connections from across a network to the local Guest account), you do not have to disable the Guest account because it does not pose a risk. (For more details on simple file sharing and the ForceGuest feature, refer to the "What's New in Security for Windows XP Professional and Windows XP Home Edition" white paper and the Knowledge Base article on "How to Set Security in Windows XP Professional That Is Installed in a Workgroup" listed in the Additional Resources section.) The Guest account is disabled by default in Windows XP Home Edition. However, only the guest's ability to log on locally is affected. The account itself is not disabled for incoming user connections from across the network and can still be used with simple file sharing.

Instructions

To disable the Guest account in Windows XP Professional or Windows 2000

1. Open the Control Panel.
2. Double-click Administrative Tools, and then double-click Computer Management.
3. Double-click the Local Users and Groups folder, and then click the Users folder.
4. In the right pane, double-click the Guest account.
5. In the Guest Properties dialog box, select the Account is disabled check box.

To disable the Guest account in Microsoft Windows NT®

1. Click Start, point to Programs, and then click Administrative Tools.
2. Click User Manager for Domains.
3. On the User menu, click Select Domain, and then type the local computer name.
4. Double-click the Guest account.
5. In the User Properties dialog box, select the Account Disabled check box.

Additional Information

Description of File Sharing and Permissions in Windows XP

What's New in Security for Windows XP Professional and Windows XP Home Edition

Users overview

How to Set Security in Windows XP Professional That Is Installed in a Workgroup

©2002-2004 Microsoft Corporation. All rights reserved.