Add CSP to disable guest account, add to canary team (#25862)

Confirmed on my vm that this profile deploys successfully and that the key in gpedit is updated to Disabled. <img width="516" alt="csp-1" src="https://github.com/user-attachments/assets/20c407f1-e696-4cc9-90c9-2ce3d896e751" /> <img width="353" alt="csp-2" src="https://github.com/user-attachments/assets/53218049-595b-4b16-97d0-ac434d883c47" /> --------- Co-authored-by: Allen Houchins <[email protected]>
fleetdm · Jan 29, 2025 · 4233937 · 4233937
1 parent e247a3b
commit 4233937
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/it-and-security/lib/windows/configuration-profiles/disable-guest-account.xml b/it-and-security/lib/windows/configuration-profiles/disable-guest-account.xml
@@ -0,0 +1,11 @@
+<Replace> 
+  <Item>
+    <Meta>
+      <Format xmlns="syncml:metinf">int</Format>
+    </Meta>
+    <Target>
+      <LocURI>./Device/Vendor/MSFT/Policy/Config/LocalPoliciesSecurityOptions/Accounts_EnableGuestAccountStatus</LocURI>
+    </Target>
+      <Data>0</Data>
+  </Item>
+</Replace>
diff --git a/it-and-security/teams/workstations-canary.yml b/it-and-security/teams/workstations-canary.yml
@@ -106,6 +106,7 @@ controls:
       - path: ../lib/windows/configuration-profiles/advanced-logging-powershell.xml
       - path: ../lib/windows/configuration-profiles/autoset-time-date.xml
       - path: ../lib/windows/configuration-profiles/disable-onedrive.xml
+      - path: ../lib/windows/configuration-profiles/disable-guest-account.xml
   windows_updates:
     deadline_days: 7
     grace_period_days: 2