In the past, when Find My Mac was enabled, it automatically enabled the Guest User. It seems like in the latest version of macOS Catalina 10.15.4, this isn’t the case anymore.
As a test, I turned off Find My Mac and turned off the Guest User. I then rebooted. Following the reboot, I re-enabled Find My Mac, but the Guest User was still turned off. In the past, it would have been automatically turned on. FWIW, Offline Finding was also enabled in Find My Mac.
Can anyone else confirm this behavior?
@a.holley - I've noticed this as well (password prompt appears for guest account). I'm trying to come up with a solution that doesn't require manual intervention on each computer... So far I've determined that scoping to a Login Window config profile that disables the guest user and then scoping back to our normal profile (which enables the guest user again) works to fix the account...
@struskowski - I thought the guest account appearing for Find my mac was normal for the last few OS's?
Guest access works with the Find My app to help you find your Mac if you lose it. You can locate your Mac if someone finds it, logs in as a guest, and then uses Safari to access the internet. See Set up the Find My app to locate a missing Mac.
From this website: https://support.apple.com/en-ca/guide/mac-help/mtusr001/mac
@a.holley - I've got a bit of a clunky workflow going that seems to be working. Here's what we're doing:
To start with, I'm sure there's a few different ways to handle the scoping. We've got extension attributes setup to watch the 4 ARD fields, which is helpful for us. Also, we're using this script for our upgrade process: https://github.com/kc9wwh/macOSUpgrade
## Set flag in ARD field 3 to disable guest user /usr/bin/defaults write /Library/Preferences/com.apple.RemoteDesktop Text3 "CatalinaGuest" ## Recon to update profiles /usr/local/jamf/bin/jamf recon
#!/bin/bash /usr/bin/defaults delete /Library/Preferences/com.apple.RemoteDesktop Text3 /usr/local/jamf/bin/jamf recon exit
This is a confusing mess and I'm not very good at explaining sometimes. If you want any help or additional details, please don't hesitate to reach out.