Detections
Analytics

1.190 WN11-SO-000010

Information

The built-in guest account must be disabled.

GROUP ID: V-253433
RULE ID: SV-253433r958504

A system faces an increased vulnerability threat if the built-in guest account is not disabled. This account is a known account that exists on all Windows systems and cannot be deleted. This account is initialized during the installation of the operating system with no password assigned.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Accounts: Guest account status'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-8, CCI|CCI-000804, Rule-ID|SV-253433r958504_rule, STIG-ID|WN11-SO-000010, Vuln-ID|V-253433

Plugin: Windows

Control ID: 97bea9c92162880ea43e1754ceb3d5758ce5f2fbd4e60f943c3bdf272fa6f603