With thanks to Pete..
run gpedit.msc
local policies > user rights assignment
deny access to this computer from the network
you need to remove guest
then enable the guest account and set the password to blank
also add guest to the 'access this computer from the network' policy too