Securing Administrative Groups and Accounts in Active Directory Part 3

Securing Guest: The Guest account allows the users who do not have an account in the domain to log on to the domain as a guest. This account is disabled by default. Leave it like that. But just to be sure we will hide the account for protection against any unauthorized access. Use fictitious first and last names, in the same format as other user names. Tasks: 1. Log on as a member of the Domain Admins group, and open Active Directory Users and Computers. 2. In the console tree, click Users. 3. In the details pane, right-click Guest, and click Rename. 4. Type the fictitious name and press Enter. 5. Right-click the new name, and click Properties. 6. On the General tab, delete the Description and type in a description to resemble other user accounts or just leave it blank. 7. In the First name and Last name boxes, type the fictitious name. 8. On the Account tab, type the new User logon name, using the same format you use for other user accounts. 9. Type this new logon name in the User logon name (pre-Windows 2000) box, and click OK. 10. Verify that the account is disabled. The icon should be red with an X over it. If it is enabled, right-click the new name, and click Disable Account.
End of Part 3.