QuestionQ2Verified/Risk Management with Policy RulesCopy linkReport a problemAsk AstroTutorSave questionWhat action is recommended for the “Guest Account Enabled” risk?ADisable the endpoint in Active DirectoryBDisable Guest accounts on all endpointsCApply a policy rule with an "Access" trigger and "Block" action on the Guest accountDAdd related endpoints to a watchlistShow AnswerAnswerExplanationGuest accounts should be disabled on endpoints unless their use is explicitly necessary, because they can allow anonymous access. The corrective action is to disable Guest accounts on all endpoints where they are enabled.Learn moreLocal Accounts | Microsoft LearnShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion