Windows XP includes a guest account that is disabled by default. However, at some time, this account may be enabled by an application. If you have Windows XP Professional, I recommend that you disable this account using the old Windows 2000 Local User and Group application. Just in case it becomes enabled again, I recommend that you rename the guest account and also assign it a password. Follow these steps to disable the guest account:
1. Click the Start button and select Run.
2. Key in lusrmgr.msc and click OK.
3. The Local User and Group application will launch. click on user account and Right-click the Guest username and select Set Password.
4. You will be prompted with a warning screen. Just click Proceed.
5. Type a complex password in both boxes and click OK.
6. The password has now been set. Next, rename the account by right-clicking it and selecting Rename.
7. Type in a new name, such as Disabled, and click Enter to save the changes.
The vulnerable guest account is now less of a problem.
