up vote 0 down vote favorite
share [g+] share [fb]

Environment

  • OS : Windows Server 2008
  • Architecture : 32 bit
  • Service pack level : SP2
  • Edition : Enterprise
  • Intent : Stand-alone test workstation, not part of a domain or a work group.

I did a fresh install of Windows Server 2008 32 bit version; renamed the Administrator, (disabled) Guest account right away after the first log on and created a standard user account. I installed Kaspersky Anti-virus for File Server and followed up with a SP2 install from TechNet and a stream of Windows Updates later, all as the Administrator. Somewhere down the lane, I setup VirtualBox.

Somewhere during this process the Guest account which was disabled became active and I noticed it on the Welcome Screen.

Well, I had to redo the machine and this time too, over the course the Guest account became active out of the blue.

Can anyone explain what could trigger this behavior :/

link|improve this question
I disable our guest account once a week, never looked into it i just put a crazy password on it... – jer.salamon Jul 16 '10 at 20:30
do you see any events in the security event log related to this account logging in? – tony roth Jul 16 '10 at 20:44
@tony roth Yes and No. The Yes part is when I notice the Guest account in the Welcome Screen and click on it to login. The No part is that I see no log on event for anyone, anything else other that it originating from the local machine and me logging in. Also, one of the first things I did after the core install was to disable services such as Remote registry, Secondary log on etc including all network services but for TCP/IP v4, v6 such as Client for Microsoft Networks, File and Printer sharing etc – t3. Jul 16 '10 at 20:53
Are you suspecting a virus or something? – tony roth Jul 16 '10 at 21:23
O_o Weird. Why not just disable it in group policy and be done with it? – Chris S♦ Jul 16 '10 at 22:19
show 6 more comments
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.