diff --git a/it-and-security/lib/windows/configuration-profiles/disable-guest-account.xml b/it-and-security/lib/windows/configuration-profiles/disable-guest-account.xml
new file mode 100644
index 000000000000..b969e73fdadb
--- /dev/null
+++ b/it-and-security/lib/windows/configuration-profiles/disable-guest-account.xml
@@ -0,0 +1,11 @@
+<Replace> 
+  <Item>
+    <Meta>
+      <Format xmlns="syncml:metinf">int</Format>
+    </Meta>
+    <Target>
+      <LocURI>./Device/Vendor/MSFT/Policy/Config/LocalPoliciesSecurityOptions/Accounts_EnableGuestAccountStatus</LocURI>
+    </Target>
+      <Data>0</Data>
+  </Item>
+</Replace>
diff --git a/it-and-security/teams/workstations-canary.yml b/it-and-security/teams/workstations-canary.yml
index 805a7a8fafc0..0f0661a198d8 100644
--- a/it-and-security/teams/workstations-canary.yml
+++ b/it-and-security/teams/workstations-canary.yml
@@ -106,6 +106,7 @@ controls:
       - path: ../lib/windows/configuration-profiles/advanced-logging-powershell.xml
       - path: ../lib/windows/configuration-profiles/autoset-time-date.xml
       - path: ../lib/windows/configuration-profiles/disable-onedrive.xml
+      - path: ../lib/windows/configuration-profiles/disable-guest-account.xml
   windows_updates:
     deadline_days: 7
     grace_period_days: 2