Big Sur - Disable the Guest Account

Information

Guest access _MUST_ be disabled.

Turning off guest access prevents anonymous users from accessing files.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.MCX:
DisableGuestAccount:
True

See Also

https://github.com/usnistgov/macos_security

Item Details

Audit Name: NIST macOS Big Sur v1.4.0 - 800-53r4 Low

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-2, 800-53|AC-2(9), 800-53|CM-5(1), CCE|CCE-85320-0, CCI|CCI-001813, STIG-ID|APPL-11-002063

Plugin: Unix

Control ID: f9d0c16d06cf8c45e9913f0c2dc3aeb5b93e6f2246a8d2fd9a6b2bf9374841b8