The GuestLogin control verifies that the Guest User account is disabled on your Mac. The Guest account allows anyone to use your computer without a password, creating a backdoor that bypasses all normal security controls.
Important: When Guest login is enabled, anyone can click "Guest" on your login screen and access your Mac without knowing any password. While the Guest account has limited access compared to your main account, it still allows someone to browse the internet, access shared files, potentially install software, and use your Mac's network connection for malicious purposes. If your Mac is lost or stolen, the Guest account gives thieves immediate access to use your device. Additionally, the Guest account bypasses audit logs, making it impossible to track who used your Mac and what they did.
Guest accounts allow anyone to use your Mac without authentication, completely bypassing password protection and giving strangers access to your device.
Activity in the Guest account can't be traced to a specific person, making it impossible to investigate security incidents or determine who accessed your Mac.
Guest users can access the internet through your Mac, potentially using your network connection for illegal activities, malware distribution, or attacks on other systems.
After disabling Guest login, Citadel will automatically verify this control during its next check.
Alternative check: Log out of your Mac (Apple menu → Log Out). The login screen should NOT show a "Guest" option.