Shared PC Account Model set to Guest allows more than Guest to logon

Brass Contributor

The SharedPC CSP (https://learn.microsoft.com/en-us/windows/client-management/mdm/sharedpc-csp) says the AccountModel setting "Configures which type of accounts are allowed to use the PC" and value 0 is only guest with description "Only guest accounts are allowed."

 

When you configure that setting to 0 as described, the Guest option appears at the logon screen, but Other User is still the primary option shown and will accept domain credentials and logon which does not match the documentation. I want only the guest option to be available at the logon screen. If this behavior is the intended behavior and the documentation is wrong, I don't understand why there is also option 2 for that setting which says "Domain-joined and guest accounts are allowed." At present, options 0 and 2 behave the same.

0 Replies