Don't allow the Guest user to log in

By Rob Nellist

Learn more about the Parameter: "Don't allow the Guest user to log in"

By default, macOS allows a Guest user account that grants access to the general macOS system and apps without login credentials. The Guest user is considered a security vulnerability because it has no password associated with it.

It is recommended the Guest account be disabled on all macOS systems unless there is a clearly demonstrated need.

Enabling this Parameter

When enabled, Kandji will ensure the Guest user feature is disabled. During each check-in, Kandji will verify and adjust the settings back to the disabled state should they change. 

Disabling this Parameter

Disabling this parameter stops Kandji from disabling the Guest user feature during each check-in. The feature will remain disabled until a user enables the Guest user again.

For more detailed information on Parameters, see the Parameters section of our Knowledge Base.