"Provisioning policy to disable local Guest accounts on Windows computers."
To create a Disable Local Guest Accounts To disable the guest account on computers that have the Local Security Agent installed, enable the disable local guest accounts policy. This is an out-of-the-box policy; you do not need to make any configuration changes to this policy.
Enable the policy
To enable this policy, do the following steps:
- In the Arellia Thycotic Security Manager, click the Policies tab.
- In the file library in the left pane, navigate to Arellia Thycotic Solutions > Local Security > Policies > Disable Local Guest Accounts.
[[This should be read only, straight out of the box, they shouldn't change anything. Update the screenshot.]]
- Select Provisioned users and Provisioned groups.
- In the right pane under Settings next to Client Command, click the Local Security Provision Command link.Off button to turn the policy on.
Schedule and apply
For instructions on how to complete set the settings schedule for the policy, go to LSS Policies and Tasks.Create or Change a Policy Schedule.
For instructions on how to apply the policy to computers, go to Resource Targets.
Run a task
To run the disable local guest accounts policy immediately, run the disable guest account task.
To run this task, do the following steps:
- In the Thycotic Security Manager, click the Tasks tab.
- In the file library in the left pane, navigate to Jobs and Tasks > Client Tasks > Local Security > Disable Guest Account.
- Set a schedule for the task. (For instructions about how to set a schedule, go to Calendar Options.)