How to Disable the Guest Account in Windows 10

Windows 10 includes a built-in Guest account that lets someone use the computer without a password. Because anyone could use it, it’s turned off by default, but older upgrades, other users, or troubleshooting guides sometimes turn it back on. You may also have created your own limited “guest” account for visitors. This guide shows how to check whether a guest account is active and how to disable or remove it.

Quick answer

Open Command Prompt as administrator and run net user guest /active:no. To remove a regular account you created for guests, go to Settings > Accounts > Family & other users, select the account, and click Remove.

Step 1: Check whether the Guest account is on

1. Click Start, type cmd, and choose Run as administrator.
2. Type net user guest and press Enter.
3. Look at the Account active line. No means it’s already disabled. Yes means it’s turned on.

You can also look at the sign-in screen. If a Guest account appears in the lower-left corner, it’s active.

Method 1: Disable it with Command Prompt

1. Open Command Prompt as administrator.
2. Run net user guest /active:no.
3. You should see “The command completed successfully.”

This works on every edition of Windows 10, including Home.

Method 2: Use Local Users and Groups (Pro, Enterprise, Education)

1. Press Windows + R, type lusrmgr.msc, and press Enter.
2. Click Users in the left pane.
3. Double-click Guest.
4. Check Account is disabled and click OK.

A small down-arrow icon on the Guest account shows that it’s disabled.

Method 3: Use Local Security Policy or Group Policy

On Pro and higher editions, you can enforce the setting with policy so it can’t easily be turned back on:

1. Press Windows + R, type secpol.msc, and press Enter.
2. Go to Local Policies > Security Options.
3. Double-click Accounts: Guest account status.
4. Select Disabled and click OK.

The same setting is in the Group Policy Editor (gpedit.msc) under Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.

Remove a guest account you created

Many people set up a separate local account named “Guest” or “Visitor” for friends and family. Windows treats this as a normal account, so the steps above won’t affect it. To remove it:

1. Sign in with an administrator account.
2. Go to Settings > Accounts > Family & other users.
3. Under Other users, select the account and click Remove.
4. Click Delete account and data.

Removing the account deletes its files, so copy anything you want to keep first. If you’d like to set up a guest-style account again later, see how to add a guest account on Windows 10.

Disable another account without deleting it

If you’d rather keep a visitor’s account and its files but stop people from signing in to it for now, disable it instead of removing it. In an administrator Command Prompt, run net user "Account Name" /active:no, using the account’s exact name in quotes. The account disappears from the sign-in screen, and its files stay on the PC. When you need it again, run the same command with /active:yes. On Pro editions, you can also check Account is disabled for that user in lusrmgr.msc.

Rename the built-in Guest account

For extra protection on Pro and higher editions, some administrators also rename the disabled Guest account so it’s less obvious. In secpol.msc, go to Local Policies > Security Options, open Accounts: Rename guest account, type a new name, and click OK. This is optional and mostly useful on shared or business PCs.

Why disable the Guest account?

• No password: Anyone with physical access could sign in.
• Network access: A guest account can open the door to shared folders and printers on your network.
• Easier to misuse: Malware and unauthorized users sometimes target enabled default accounts.

For better security, give each person their own standard account with a password, and protect your own with a strong password or PIN. See how to set a lock screen password in Windows 10.

If you can’t disable it

• “Access is denied”: Command Prompt isn’t running as administrator. Close it and reopen it with Run as administrator.
• The setting turns back on: A work or school policy may control it. Check with your IT department.
• lusrmgr.msc won’t open: You’re on Windows 10 Home. Use the Command Prompt method instead.

Related: How to add a guest account on Windows 11.

Frequently asked questions

Can I delete the built-in Guest account?

No. It’s a built-in system account. Disabling it is the supported way to turn it off.

Will disabling Guest affect other accounts?

No. Your account and other users’ accounts aren’t changed.

Is the Guest account on by default in Windows 10?

No. It’s disabled by default, so you’ll usually only need these steps if someone turned it on.