how to get rid of 'guest user' on login screen

[Aidan04]

i know it's an issue, but i couldn't find any solution on the net that works for me:

in the login screen (the first page you see when you boot up your mac) on my macbook (Sierra OS), i see two users: my admin one and a 'guest' one. i want only the admin to appear so i just type the password and get in.

i tried turn off all options on 'userd & groups', the 'guest user' still appeared.
i tried turn off 'FileVault' and it worked, the 'guest user' disappeared. but then when i charged my MacBook it automatically encrypted it again or something and though it shows me the 'FileVault' is off, the 'guest user' reappeared and won't go.

i don't know what else can i do to finally get rid of this 'guest user'. on my Mac mini everything's just fine..

help would be much appreciated!

 

[fisherking]

you have to turn off 'find my mac' in the icloud preferences, but keep in mind... you'd lose that function. so it's a tradeoff (and seems saner to keep the guest login). your call, of course...

 

[KALLT]

You don’t need to disable Find My Mac for this.

If disabling won’t work, then you can also delete the account. The account does not exist in a default installation, but is only created when it is first enabled in Users & Groups.

sudo dscl . -delete /Users/Guest

Be careful with this command, do not mistype it.

 

[fisherking]

You don’t need to disable Find My Mac for this.

If disabling won’t work, then you can also delete the account. The account does not exist in a default installation, but is only created when it is first enabled in Users & Groups.

sudo dscl . -delete /Users/Guest

Be careful with this command, do not mistype it.

my understanding (and i've been wrong before, at least once)... is, this account is needed for 'find my mac' to work. is that not correct? just want to be sure...

 

[KALLT]

my understanding (and i've been wrong before, at least once)... is, this account is needed for 'find my mac' to work. is that not correct? just want to be sure...

Nope, not required. Find My Mac just needs an Internet connection. It needs to work in sleep mode too, after all. Find My Mac merely benefits from having guest mode.

 

[MacGizmo]

Just turn off Guest Access in the Users & Groups System Panel>Guest User

 

[DanDilla]

Nope, not required. Find My Mac just needs an Internet connection. It needs to work in sleep mode too, after all. Find My Mac merely benefits from having guest mode.

Jep, that's right, BUT if someone finds your mac and doesn't wipe it in the first place (like if it gets stolen), it's more likely the that person opens it up and logs into the guest account, where he will be able to open safari and log into a wifi network and surf around the web.
Yes, logging into a wifi is possible in the login screen too, but if that guy doesn't know about "find my mac", there's no reason to do this.

Don't know if that's just me - I definetly see a logic behind this.

 

[997440]

[...]
i tried turn off 'FileVault' and it worked, the 'guest user' disappeared. but then when i charged my MacBook it automatically encrypted it again or something and though it shows me the 'FileVault' is off,
[...]

Side note -- It's highly unlikely that your MacBook was automatically re encrypted. It's also highly unlikely that the GUI report that shows FileVault as being off, is wrong.

Entering the following command in Terminal will output FileVault's status as either "FileVault is On" or "FileVault is Off".

fdesetup status

 

[Weaselboy]

i tried turn off 'FileVault' and it worked, the 'guest user' disappeared. but then when i charged my MacBook it automatically encrypted it again or something and though it shows me the 'FileVault' is off, the 'guest user' reappeared and won't go.

Just disable it in the screen @MacGizmo described and you should be all set.

I don't see how FV turned itself back on though.

You don't need that command @KALLT mentioned if you are using FileVault. What happens is with FV and FMM on it sets up a Safari only Guest account that boots to the recovery partition and there is no actual Guest account at all on your computer.

The idea is a thief would not be able to login to your account, and might click the quest account. That boots to Safari on the recovery partition and theoretically hits the Internet to receive the lockdown command you sent.