guest-permissions-on-user-databases.md

title	description	author	ms.author	ms.date	ms.service	ms.subservice	ms.topic	helpviewer_keywords
Guest Permissions on User Databases	Determine whether the guest user has permission to access user databases in SQL Server. Revoke the guest user permission if it isn't required.	VanMSFT	vanto	12/15/2023	sql	security	reference	Best Practices [Database Engine]

Guest permissions on user databases

[!INCLUDE SQL Server]

This rule determines whether the guest user has permission to access the database. This rule applies to user databases only.

Best practices recommendations

Revoke the guest user permission to access the database if it isn't required.

The guest user can't be dropped, but guest user can be disabled by revoking its CONNECT permission by executing REVOKE CONNECT FROM GUEST within any database other than master, tempdb, or msdb.

For more information

Securing SQL Server

Related content

• Monitor and Enforce Best Practices by Using Policy-Based Management