Ger, you want to remove the Guest account because you believe a hacker will reactivate it and use it to gain access into your network...if a hacker gained access to your network with permissions to reenable the guest account you would have a lot more problems than that. the hacker is now a Domain/Enterprise Admin with multiple usernames in Users and anyother place he/she wanted to put one. Disable the Guest account, setup loging for the Guest account. Set up strong passwords and Account Lockout Policy in the GPO and of course logging on that. then rename the Administrator's account(nobody should be logging on as Administrator, they should have there own usernames and passwords with admin privledges) and remove the groups that the Administrator's account is in and put it in the guest or domain user group. There is a lot more things you can do to secure a network beyond what is stated here. does the computer need to be connected to the network? or put a firewall between that computer and the rest of the internal network. are you trying to protect it from employees or from the internet? or both? PS dont forget to have the logon screen state something to the effect, that the system is for authorized company employees only... so you can press charges on whoever tries to get in illegally.

0