Inactive the GUEST user

Content Authoring
1

(imported topic written by bigbao91)

i want to disable the GUEST user using “net user guest /active:no” but i don’t know how i can select the appalible computers? Can any one tell me ?thanks.

2

(imported comment written by BenKus)

Hi bigbao,

You can make a Fixlet that has the following relevance:

exists local user whose (name of it = “Guest” and account disabled flag of it = false)

and the action:

waithidden cmd.exe /C net user guest /active:no

Important Note: This relevance clause will interact poorly with Domain Controllers because “local users” on a domain controller can be tens of thousands of users, which will drive the CPU up for a bit to search through them all… so I would avoid using this Fixlet if you have BES Agents on domain controllers…

Ben

3

(imported comment written by bigbao91)

Thank you .Ben

4

(imported comment written by SystemAdmin)

Ben Kus

Hi bigbao,
Important Note: This relevance clause will interact poorly with Domain Controllers because “local users” on a domain controller can be tens of thousands of users, which will drive the CPU up for a bit to search through them all… so I would avoid using this Fixlet if you have BES Agents on domain controllers…

So how would one write a relevance clause that would weed out domain controllers?

5

(imported comment written by BenKus)

This should work:

product type of operating system != nt domain controller product type

Ben

6

(imported comment written by SystemAdmin)

Thanks Ben! I happened to find it in another post from you this morning as well.

http://forum.bigfix.com/viewtopic.php?pid=7406#p7406

7

(imported comment written by deepak9165)

The below relevence clause

exists local user whose (name of it = “Guest” and account disabled flag of it = false) is returning me the error

"it uased outside of whose clause "

Plz help me resolve this problem

8

(imported comment written by deepak9165)

Hi

pl ignore the previous post … relevence clause working fine :slight_smile:

9

(imported comment written by SystemAdmin)

copy out to a file with extension .bes and double click to import…

<?xml version=
"1.0" encoding=
"UTF-8"?> <BES xmlns:xsi=
"http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation=
"BES.xsd"> <Task> <Title>Disable Local Guest Account</Title> <Description>Disable the local guest account on windows computers</Description> <Relevance>name of operating system contains 
"Win"</Relevance> <Relevance>product type of operating system != nt domain controller product type</Relevance> <Relevance>exists local user whose (name of it = 
"Guest" and account disabled flag of it = 

false)</Relevance> <Category></Category> <Source>Moran IT</Source> <SourceID></SourceID> <SourceReleaseDate>2010-12-30</SourceReleaseDate> <SourceSeverity></SourceSeverity> <CVENames></CVENames> <SANSID></SANSID> <MIMEField> <Name>x-fixlet-modification-time</Name> <Value>Thu, 30 Dec 2010 23:56:14 +0000</Value> </MIMEField> <Domain>SCVM</Domain> <DefaultAction ID=
"Action1"> <Description> <PreLink>Click </PreLink> <Link>here</Link> <PostLink> to deploy 

this action.</PostLink> </Description> <ActionScript MIMEType=
"application/x-Fixlet-Windows-Shell"> 
//disable now... waithidden cmd.exe /C net user guest /active:no</ActionScript> </DefaultAction> </Task> </BES>