Windows guest account is a special user account designed to provide users with limited rights to the computer. It allows basic use, such as running programs and browsing the internet, but prevents system-wide changes, such as installing programs, changing settings, and accessing other users' files.

Although a guest account can be useful for temporary users or in public computers, it poses security risks that can expose the system to attacks.

How to Disable a Guest Account in Windows?

Windows 10 and newer versions do not by default include an active guest account in the same way as earlier versions, but if the account is activated or you want to ensure that it cannot be used, you can follow these instructions.

Open PowerShell with administrative privileges (Run as... Administrator)

Check if the Guest account is enabled using the 

You can, and should, make the change centrally with a group policy. The path is 

Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> Accounts: Guest account status

The lab takes a couple of minutes to start up, please wait patiently and add more time if needed. You don't need to close the lab between switching modules in this course. You can log in to the server via RDP with the username "

Windows practice

You can do it either with group policy or directly locally with PowerShell. When the account is disabled, run Check.ps1 and enter flag 7.

## What is the Guest account in Windows?

Windows guest account is a special user account designed to provide users with limited rights to the computer. It allows basic use, such as running programs and browsing the internet, but prevents system-wide changes, such as installing programs, changing settings, and accessing other users' files.

Although a guest account can be useful for temporary users or in public computers, it poses security risks that can expose the system to attacks.

---

## How to Disable a Guest Account in Windows?

### From PowerShell

Windows 10 and newer versions do not by default include an active guest account in the same way as earlier versions, but if the account is activated or you want to ensure that it cannot be used, you can follow these instructions.

- Open PowerShell with administrative privileges (Run as... Administrator)
- Check if the Guest account is enabled using the **Get-LocalUser** cmdlet.
- If enabled, disable it with the **Disable-Localuser** cmdlet.

```powershell
PS C:\Windows\system32> Get-LocalUser Guest

Name Enabled Description
---- ------- -----------
Guest True Built-in account for guest access to the computer/domain

PS C:\Windows\system32>
PS C:\Windows\system32>
PS C:\Windows\system32> Disable-LocalUser Guest
PS C:\Windows\system32> Get-LocalUser Guest

Name Enabled Description
---- ------- -----------
Guest False Built-in account for guest access to the computer/domain
```

### Group Policy

You can, and should, make the change centrally with a group policy. The path is **Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> Accounts: Guest account status**

![](sanity:image-cd7e022a2f00fbbc4d505b29b8be59b8c479c100-772x388-png)

![](sanity:image-6ade851a330bdcf2780e431a36e29a6343136ede-1186x674-png)

![](sanity:image-eea6a624e92b074f85432776a75c36fed81fb52c-642x520-png)

---

## Tasks

@exercise c29ee52a0c98

### Disable guest account

You can do it either with group policy or directly locally with PowerShell. When the account is disabled, run Check.ps1 and enter flag 7.

@exercise 9363bf2c9dd6


Disabling the guest account

In this course, we go through the basics related to managing Windows systems and maintaining information security.

In this course, we will go through the basics of Windows system administration and cybersecurity maintenance.

We familiarize ourselves with Windows virus protection, firewall, and automatic updates. We learn to use remote desktop connections, registry editor, PowerShell, server manager, and group policies.

The course does not go into great depth on Windows domains, attacks on them, or hardening. These more advanced topics are covered in the "Windows - Attack and Defense" course.

Disabling the guest account

What is the Guest account in Windows?

Learn to hack — start here