| title | Guest Permissions on User Databases | Microsoft Docs | |
|---|---|---|
| ms.custom | ||
| ms.date | 06/13/2017 | |
| ms.prod | sql-server-2014 | |
| ms.reviewer | ||
| ms.technology | security | |
| ms.topic | conceptual | |
| helpviewer_keywords |
|
|
| ms.assetid | 540f1c6d-df51-497e-958a-3a0f429d2920 | |
| author | MikeRayMSFT | |
| ms.author | mikeray | |
| manager | craigg |
This rule determines whether the guest user has permission to access the database. This rule applies to user databases only.
Revoke the guest user permission to access the database if it is not required.
The guest user cannot be dropped, but guest user can be disabled by revoking its CONNECT permission by executing REVOKE CONNECT FROM GUEST within any database other than master, tempdb, or msdb.
Monitor and Enforce Best Practices by Using Policy-Based Management