# Disable the Guest user

For a more secure deployment, Oracle recommends running WebLogic Server with the `guest` account disabled.

To disable the Guest user:

1. If you have not already done so, in the Change Center of the Administration Console, click Lock & Edit (see Use the Change Center).
2. In the left pane, select your domain (for example, mydomain).
3. Select Compatibility Security > General.
4. Select the Guest Disable checkbox.
5. Reboot WebLogic Server.

   Disabling the `guest` account just disables the ability to log in into the account `guest`; it does not disable the ability for unauthenticated users to access a WebLogic Server deployment.