os_guest_access_smb_disable #286

Closed
opened 2026-01-19 18:29:56 +00:00 by michael · 1 comment
Owner

Originally created by @robertgendler on GitHub.

os_guest_access_smb_disable should be moved to sysprefs

Also the configuration profile key does not appear to work and does not restrict SMB guest access on Catalina or Big Sur

Check

/usr/bin/defaults read /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess

Result: 0

Fix

/usr/bin/defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess -bool no
Originally created by @robertgendler on GitHub. os_guest_access_smb_disable should be moved to sysprefs Also the configuration profile key does not appear to work and does not restrict SMB guest access on Catalina or Big Sur Check ``` /usr/bin/defaults read /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess ``` Result: 0 Fix ``` /usr/bin/defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess -bool no ```
Author
Owner

@thebestoneever commented on GitHub:

This is how we did it in stonix:

https://github.com/CSD-Public/stonix/blob/master/src/stonix_resources/rules/DisableGuestAccess.py

Have a Super Fantastic Day!

If I can help you in any way, business or beyond, just let me know!

Ekkehard Koch
NIE-CDS

iPhone: +1 505.695.8728

On Jun 10, 2021, at 7:17 AM, Bob Gendler @.***> wrote:

os_guest_access_smb_disable should be moved to sysprefs

Also the configuration profile key does not appear to work and does not restrict SMB guest access on Catalina or Big Sur

Check

/usr/bin/defaults read /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess

Result: 0

Fix

/usr/bin/defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess -bool no


You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHubhttps://github.com/usnistgov/macos_security/issues/74, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ACPU26UTZV445KM6QJSFKTDTSC3QNANCNFSM46OQGWHA.

@thebestoneever commented on GitHub: This is how we did it in stonix: https://github.com/CSD-Public/stonix/blob/master/src/stonix_resources/rules/DisableGuestAccess.py Have a Super Fantastic Day! If I can help you in any way, business or beyond, just let me know! — Ekkehard Koch NIE-CDS iPhone: +1 505.695.8728 On Jun 10, 2021, at 7:17 AM, Bob Gendler ***@***.***> wrote: os_guest_access_smb_disable should be moved to sysprefs Also the configuration profile key does not appear to work and does not restrict SMB guest access on Catalina or Big Sur Check /usr/bin/defaults read /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess Result: 0 Fix /usr/bin/defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess -bool no — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub<https://github.com/usnistgov/macos_security/issues/74>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ACPU26UTZV445KM6QJSFKTDTSC3QNANCNFSM46OQGWHA>.
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: usnistgov/macos_security#286