Yet Another Guest Account Question

I use a script as part of my imaging process (FirstRun).

#!/bin/sh
# Show username / password fields
defaults write /Library/Preferences/com.apple.loginwindow SHOWFULLNAME -bool true
# Disallow guest network fileshare access
defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess -bool NO
# Disallow guest network fileshare access
defaults write /Library/Preferences/com.apple.AppleFileServer guestAccess -bool NO
# Stop messages about accounts available on other disks
defaults write /Library/Preferences/com.apple.loginwindow EnableExternalAccounts -bool false
# Enable computer info toggle by clicking on the time on login window
defaults write /Library/Preferences/com.apple.loginwindow AdminHostInfo HostName
# Remove Fast User Switching option
defaults write /Library/Preferences/.GlobalPreferences MultipleSessionEnabled -bool NO
# Set time that login window warns about password expiry
defaults write /Library/Preferences/com.apple.loginwindow PasswordExpirationDays 15

The 2 lines mentioning guest access, disables guest access at the login window.

Hope this helps,

Andrew

Thanks Andrew, so to confirm your Guest User in the Users & GRoups shows as Disabled, Managed?

Yes, just checked actually to confirm!

"Guest User
Disabled"

Andrew

hi twrangham- you wouldn't happen to have find my mac enabled on that mac would you? the combination of FV2 and find my mac forces the guest user 'honeypot' functionality which enables the guest login check box regardless of your MCX.

I'm seeing this, too. The Guest User should be completely disabled but still appears in FileVault. It also appears in the Users & Groups control panel as "Enabled, Managed" and is not editable by the admin user.

• Only one local account, an admin
• No directory services
• Enrolled in Casper; managed prefs set to disable Guest User
• No AppleIDs, no iCloud.