Accounts: Rename Guest Account
|ID: oval:gov.nist.usgcb.windowsseven:def:54||Date: (C)2012-04-13 (M)2018-03-28|
|Class: COMPLIANCE||Family: windows|
This security setting determines whether a different account name is associated with the security identifier (SID) for the account "Guest." Renaming the well-known Guest account makes it slightly more difficult for unauthorized persons to guess this user name and password combination.
An administrator can temporarily override this setting by manually renaming the account, but upon the next application of group policy, Windows will re-rename the account as indicated by this policy provided Group Policy's Security policy processing is configured to reapply policies even if they haven't changed. This policy DOES affect the built-in Guest domain account in Active Directory if the policy is enabled at the root of the domain in Default Domain Policy. It has no affect if enabled in Default Domain Controllers Policy. This setting only changes the pre-Windows 2000 logon name of the account.
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Accounts: Rename guest account
(2) REG: INFO NOT AVAILABLE
|Microsoft Windows 7|