Delete Windows 2000 Guest account

From: Robert Rota (robert.a.rota@saic.com)
Date: 10/22/01 

Date: 22 Oct 2001 18:31:52 -0000
Message-ID: <20011022183152.3664.qmail@mail.securityfocus.com>
From: Robert Rota <robert.a.rota@saic.com>
To: focus-ms@securityfocus.com
Subject: Delete Windows 2000 Guest account
('binary' encoding is not supported, stored as-is) Mailer: SecurityFocus

Accessing the SAM through the scheduler gives you
SYSTEM context (e.g., c:\at <time> /interactive
regedt32). If you want to improve security by deleting
the Guest account delete the following keys:
HKLM\SAM\SAM\Domains\Users\000001F5
HKLM\SAM\SAM\Domain\Users\Names\Guest
When promoting to AD the Guest account stays
deleted. You now have a native mode DC without a
Guest account. Delguest.exe is not currently working
with Windows 2000 so until then you can use this
method.

Robert A. Rota
SAIC

Relevant Pages

  • Re: File sharing
    ... >> The windows firewall is on File and print sharing is on. ... > It could be a ForceGuest issue... ... Validate User Credentials on Microsoft Operating Systems ... > If the Guest account is enabled, an SSPI logon will succeed as Guest ...
    (microsoft.public.windowsxp.security_admin)
  • Re: guest dial up
    ... Ramesh - Microsoft MVP ... Free Online Virus Scanners and Security Tests: ... If you are wanting the Guest account to have Internet access, ... Troubleshooting Windows XP ...
    (microsoft.public.windowsxp.general)
  • Re: A unknown bug in windows XP???
    ... Check that your XP machine allows to login with plaintext password. ... be disabled by default (check system security policies). ... If a Windows XP worksation, ... > Simple File Sharing *requires* the guest account to be enabled. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Share password on XP home.
    ... the Guest account in Windows XP on later versions of Windows is ... Under System Tools, double-click "Local Users and Groups" to expand it, ... Windows-based computer for each user and give the users rights to the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: A unknown bug in windows XP???
    ... > I work on a small lan with some win9x and windows XP workstation, ... > login in a WinNT PDC. ... Why is it impossible for a Windows XP client to acces it? ... Simple File Sharing *requires* the guest account to be enabled. ...
    (microsoft.public.windowsxp.security_admin)