To disable the guest account on computers that have the Local Security Agent installed, enable the disable local guest accounts policy. This is an out-of-the-box policy created to disable local Guest accounts on Windows computers. No configuration changes need to be made to this policy. To disable the guest account on computers with the Local Security Agent installed, enable this policy.The policy can be found here; you do not need to make any configuration changes to this policy.
Enable the policy
To enable this policy, do the following steps:
- In the Arellia Thycotic Security Manager, click the Policies tab.
- In the file library in the left pane, navigate to Arellia Thycotic Solutions > Local Security > Policies > Disable Local Guest Accounts.
- Select Provisioned users and Provisioned groups.
- In the right pane, click the Off button to turn the policy on.
Schedule and apply
For instructions on how to complete set the settings schedule for the policy, go to LSS Policies and Tasks.Create or Change a Policy Schedule.
For instructions on how to apply the policy to computers, go to Resource Targets.
Run a task
To run the disable local guest accounts policy immediately, run the disable guest account task.
To run this task, do the following steps:
- In the Thycotic Security Manager, click the Tasks tab.
- In the file library in the left pane, navigate to Jobs and Tasks > Client Tasks > Local Security > Disable Guest Account.
- Set a schedule for the task. (For instructions about how to set a schedule, go to Calendar Options.)