Reinforce guest account status settings
Built-in guest account enables users to login to a Windows system without requiring a password for authentication. This allows bad actors to login to your servers and domain controllers as a guest to access your resources. Even though guest accounts are disabled by default, hackers can easily override the default settings to wreak havoc in your network. Configuring the Accounts: Guest Account Status policy ensures the attempts of bad actors are blocked.Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options