Disable Guest Account - Workstation

Summary

Checks the built-in Windows Guest account once a day and disables it if it is enabled. It runs on Windows workstations.

The condition is met when all of these are true:

• The cPVAL Disable Guest Account custom field is set to Enable.
• The device is not a domain controller (the AD-Domain-Services role is not installed).
• The Disable Guest Accounts automation, run with Detect Only, finds the Guest account enabled.

When the condition is met, the Disable Guest Accounts automation runs and disables the account. The condition resets on its own once the account is disabled.

Details

• Name: Disable Guest Account - Workstation
• Description: Checks Windows Workstation daily and disables the built-in Guest account when it is enabled.
• Recommended Agent Policies: Windows Workstation Policy [Default]
• Runs Every: 24 hours

Dependencies

• Solution - Disable Guest Account

Compound Condition Creation

• Compound Condition Configuration

Changelog

2026-10-12

• Initial version of the document