Hello Jeffeys,
Windows no longer includes the old “Guest” account option, so the supported way to give someone temporary access without exposing company files is to create a standard local user account. In Settings > Accounts > Family & other users, you can add a new local account without linking it to Microsoft 365. Make sure you assign it the “Standard User” role, not Administrator, so it cannot access system‑wide data or install software. Company files stored under your own profile remain isolated, as Windows enforces NTFS permissions per user profile.
If you want stronger separation, place sensitive data under a restricted folder and explicitly remove “Users” group permissions, leaving only Administrators and your own account. This way the guest login can be used for basic access, but it won’t expose business files.
Hope it helps :)
Harry.