Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

I rebooted my Mac yesterday after installing the Apple update TS4088. Even though I disabled Guest Logins in my Users Preferences and have enabled FileVault 2 since the start, I am able to see Guest Login which is showing the following notice

The computer will restart to a secure, safari only system for the guest user

Is there a way to disable the Guest user ? The whole drive is supposed to be encrypted ideally, but looks like there is a bug ?

Guest User Disable screenshot

enter image description here

Related Questions/Articles:

File Vault 2 - Apple KB article

Can FileVault show the login window as 'name and password', not 'list of users'?

Unable to create Guest Account after enabling FileVault

How to create a pseudo-guest account in Lion with FileVault 2?

share|improve this question

3 Answers 3

up vote 6 down vote accepted

How to disable that “Guest User” from appearing at the OS X 10.7.2 login screen

  • Open System Preferences
  • Click on “Security & Privacy”
  • Click the lock in the lower corner and type in your administrative password to unlock the control panel
  • Check the box next to “Disable restarting to Safari when screen is locked”

This prevents the Guest User account from being visible at the login screen both during reboot and at the login screen. Again, it’s highly recommended to keep this enabled for security purposes, but if your Mac is locked down with a security cable or you don’t have any use for Find My Mac, you could disable this and not feel too bad about it.

enter image description here

If you haven’t tried it yet, clicking on the Guest User account gives you this message:

This computer will restart to a secure, Safari-only system for the Guest user.

The reboot process is quick and opens directly to Safari, there is no access to anything else. No Finder, no preferences, nothing.

Source: osxdaily

share|improve this answer
1  
It should be noted that this option is only seen if you have Find My Mac enabled. –  Kassym Dorsel Oct 26 '11 at 13:45
    
Thank you, that fixed it for me. +1 –  Warren Young Oct 29 '11 at 2:27

With 10.7.2 iCloud is installed. If you set it up, if I remember correctly, Find My Mac is enabled by default. Regardless of your options in Users & Groups the Guest User will show up.

To remove the guest User go to iCloud preference pane and turn off Find My Mac. enter image description here

share|improve this answer
    
-1 for recommending disabling Find My Mac completely. That actually lessens security. –  Blacklight Shining Mar 3 '13 at 0:02
    
I understand that having this option enabled may lead to the recovery of a stolen computer. Although once another person has physical access to the computer the only thing that offers any real security is FileVault. Find My Mac can also be easily disabled. –  Kassym Dorsel Mar 4 '13 at 15:03

This appears to be by design.

Keep in mind, the whole drive is still encrypted with File Vault. The 10.7.2 Guest/Safari-only User only has access to / runs off the Recovery partition, not the main volume where your user data and applications are stored.

If someone does login to the Guest User, they have no access to the system partition, and as a bonus, the Mac is findable via Find-My-Mac.

share|improve this answer
    
This informations is the key: "The guest runs off the recovery partition". Which is the only option because you have no password to run off the main volume. –  gentmatt Sep 26 '12 at 10:33

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.