{"id":43389,"date":"2019-12-15T09:00:00","date_gmt":"2019-12-15T16:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=43389"},"modified":"2021-09-27T17:47:13","modified_gmt":"2021-09-27T21:47:13","slug":"policies-disable-guest-account","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account","title":{"rendered":"Understanding Policies: Disable Guest Account and Built-in Guest Account Status"},"content":{"rendered":"\n

探花大神\u00ae<\/sup> Policies<\/a> are the Directory-as-a-Service\u00ae<\/sup> alternative to Microsoft\u00ae<\/sup> Group Policy Objects (GPOs). They cover all three major operating systems (Windows\u00ae<\/sup>, Mac\u00ae<\/sup>, Linux\u00ae<\/sup>), which enables admins to automate many of their system security management needs.
<\/p>\n\n\n\n

For example, two powerful security policies include the Disable Guest Account policy for Macs and Built-in Guest Account Status policy for Windows. Once deployed, they remove a potential attack vector for would-be attackers.<\/p>\n\n\n\n

What are the Guest Account Policies?<\/h2>\n\n\n\n

The Disable Guest Account Policy removes guest access on managed Mac systems, which ensures that only authorized users can access the machine. The Built-in Guest Account Status Policy is the analogue for 探花大神-managed Windows systems.
<\/p>\n\n\n\n

Both policies use the 探花大神 system agent to make changes directly to a system\u2019s native settings, removing the need to manually configure them. Admins can deploy these policies remotely at scale across their entire Mac and Windows fleets.<\/p>\n\n\n\n

Why Use Guest Account Policies?<\/h2>\n\n\n\n

Guest accounts can present unnecessary security risks to workstations. Although guest accounts are generally limited, they still open up the possibility of several crucial vulnerabilities. <\/p>\n\n\n\n

Installed Applications<\/h3>\n\n\n\n

One such vulnerability is the fact that guest accounts have access to applications installed directly on the system. By accessing these applications through a guest account, a bad actor can take critical financial or operational data stored in the app itself. This unrestricted access can be especially compromising with downloaded password management software. Beyond that, the hacker may also change login or operation information in the application to prevent later access or cause chaos in an organization. <\/p>\n\n\n\n

\/tmp Directory<\/h3>\n\n\n\n

Besides local applications, guest accounts also provide access to a system\u2019s \/tmp directory. The \/tmp directory houses a system\u2019s temporary files, which are often created while running applications or other functions. An attacker on a guest account can make changes to this temporary data storage location to download malware or other malicious scripts to run and compromise a system.
<\/p>\n\n\n\n

In other scenarios, hackers have even used guest accounts to remotely access<\/a> admin accounts on a system. Clearly, the pitfalls of a guest account outweigh any potential benefits. So, by using the Policies above, admins can guard all of their Mac and Windows systems from these types of attacks.<\/p>\n\n\n\n

How to Implement the Guest Account Policies<\/h2>\n\n\n\n

The Disable Guest Account and Built-in Guest Account Status Policies, like all 探花大神 Policies, can be enabled through a few clicks in the Directory-as-a-Service admin portal. IT admins can apply Policies<\/a> to individual systems or across entire system Groups as their needs dictate.<\/p>\n\n\n\n

Not a 探花大神 Customer?<\/h3>\n\n\n\n

探花大神 Directory-as-a-Service<\/a> is the cloud directory service for the modern era. With 探花大神, IT organizations provide their end users with a single set of credentials to access virtually all of their IT resources. Contact us<\/a> to learn more.
<\/p>\n","protected":false},"excerpt":{"rendered":"

Put up a barrier to entry for would-be attackers with the Disable Guest Account Policy for Macs and Built-in Guest Account Status Policy for Windows.<\/p>\n","protected":false},"author":70,"featured_media":43060,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[23],"tags":[],"collection":[2778],"platform":[],"funnel_stage":[3015],"coauthors":[],"acf":[],"yoast_head":"\nDisable Guest Account and Built-in Guest Account Status - 探花大神<\/title>\n<meta name=\"description\" content=\"Put up a barrier to entry for would-be attackers with the Disable Guest Account Policy for Macs and Built-in Guest Account Status Policy for Windows.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Understanding Policies: Disable Guest Account and Built-in Guest Account Status\" \/>\n<meta property=\"og:description\" content=\"Put up a barrier to entry for would-be attackers with the Disable Guest Account Policy for Macs and Built-in Guest Account Status Policy for Windows.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account\" \/>\n<meta property=\"og:site_name\" content=\"探花大神\" \/>\n<meta property=\"article:published_time\" content=\"2019-12-15T16:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-09-27T21:47:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/11\/探花大神-Policies-Template.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"564\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Zach DeMeyer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Zach DeMeyer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account\"},\"author\":{\"name\":\"Zach DeMeyer\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d\"},\"headline\":\"Understanding Policies: Disable Guest Account and Built-in Guest Account Status\",\"datePublished\":\"2019-12-15T16:00:00+00:00\",\"dateModified\":\"2021-09-27T21:47:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account\"},\"wordCount\":472,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/11\/探花大神-Policies-Template.jpg\",\"articleSection\":[\"Best Practices\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account\",\"url\":\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account\",\"name\":\"Disable Guest Account and Built-in Guest Account Status - 探花大神\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/11\/探花大神-Policies-Template.jpg\",\"datePublished\":\"2019-12-15T16:00:00+00:00\",\"dateModified\":\"2021-09-27T21:47:13+00:00\",\"description\":\"Put up a barrier to entry for would-be attackers with the Disable Guest Account Policy for Macs and Built-in Guest Account Status Policy for Windows.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/11\/探花大神-Policies-Template.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/11\/探花大神-Policies-Template.jpg\",\"width\":1024,\"height\":564,\"caption\":\"GPO-Like Policy\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Understanding Policies: Disable Guest Account and Built-in Guest Account Status\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"探花大神\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"探花大神\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"探花大神\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d\",\"name\":\"Zach DeMeyer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d1d6602d927eb5a16b1dfd4ba6b4c219\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g\",\"caption\":\"Zach DeMeyer\"},\"description\":\"Zach is a Product Marketing Specialist at 探花大神 with a degree in Mechanical Engineering from the Colorado School of Mines. He loves being on the cutting edge of new technology, and when he's not working, he enjoys all things outdoors, music, and soccer.\",\"sameAs\":[\"http:\/\/www.jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Disable Guest Account and Built-in Guest Account Status - 探花大神","description":"Put up a barrier to entry for would-be attackers with the Disable Guest Account Policy for Macs and Built-in Guest Account Status Policy for Windows.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account","og_locale":"en_US","og_type":"article","og_title":"Understanding Policies: Disable Guest Account and Built-in Guest Account Status","og_description":"Put up a barrier to entry for would-be attackers with the Disable Guest Account Policy for Macs and Built-in Guest Account Status Policy for Windows.","og_url":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account","og_site_name":"探花大神","article_published_time":"2019-12-15T16:00:00+00:00","article_modified_time":"2021-09-27T21:47:13+00:00","og_image":[{"width":1024,"height":564,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/11\/探花大神-Policies-Template.jpg","type":"image\/jpeg"}],"author":"Zach DeMeyer","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Zach DeMeyer","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account"},"author":{"name":"Zach DeMeyer","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d"},"headline":"Understanding Policies: Disable Guest Account and Built-in Guest Account Status","datePublished":"2019-12-15T16:00:00+00:00","dateModified":"2021-09-27T21:47:13+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account"},"wordCount":472,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/11\/探花大神-Policies-Template.jpg","articleSection":["Best Practices"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account","url":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account","name":"Disable Guest Account and Built-in Guest Account Status - 探花大神","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/11\/探花大神-Policies-Template.jpg","datePublished":"2019-12-15T16:00:00+00:00","dateModified":"2021-09-27T21:47:13+00:00","description":"Put up a barrier to entry for would-be attackers with the Disable Guest Account Policy for Macs and Built-in Guest Account Status Policy for Windows.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/11\/探花大神-Policies-Template.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/11\/探花大神-Policies-Template.jpg","width":1024,"height":564,"caption":"GPO-Like Policy"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/policies-disable-guest-account#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Understanding Policies: Disable Guest Account and Built-in Guest Account Status"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"探花大神","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"探花大神","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"探花大神"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d","name":"Zach DeMeyer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d1d6602d927eb5a16b1dfd4ba6b4c219","url":"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g","caption":"Zach DeMeyer"},"description":"Zach is a Product Marketing Specialist at 探花大神 with a degree in Mechanical Engineering from the Colorado School of Mines. He loves being on the cutting edge of new technology, and when he's not working, he enjoys all things outdoors, music, and soccer.","sameAs":["http:\/\/www.jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/43389"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/70"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=43389"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/43389\/revisions"}],"predecessor-version":[{"id":43393,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/43389\/revisions\/43393"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/43060"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=43389"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=43389"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=43389"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=43389"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=43389"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=43389"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=43389"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}