Hi Apple Team,
We are using the Accounts MDM payload with:
PayloadType: com.apple.MCX DisableGuestAccount: true
On macOS 26, even after the MDM profile is successfully applied, a local Administrator can still toggle the Guest User setting in System Settings.
Expected: The setting should be enforced by MDM and should not be modifiable by an Administrator.
Interestingly, the same configuration works as expected on macOS 27 beta, where the Guest User setting is shown as “This setting has been configured by a profile” and cannot be modified.
Could you please confirm whether this is a known issue/regression in macOS 26 and whether there is a workaround or any permanent solution in later patches ?
Environment:
macOS 26.x Payload: com.apple.MCX DisableGuestAccount = true macOS 27 beta: Works as expected