I'm doing a compare of my development server with production and find one has this:
EXEC sp_grantdbaccess N'guest'
How would anyone take advantage of the guest user in a connection string? It doesn't seem to be mapped to a logon. In pubs I see guest is a member of public. Guest doesn't seem to be deletable.
Is this some sort of anonymous access account or what? If this is a security problem, what do I do to fix it?