How about using the Guests group? Psgetsid shows that it is builtin.
SID for BUILTIN\guests:
S-1-5-32-546
The guest account is a member of the guests group.
C:\>net localgroup guests
Alias name guests
Comment Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted
Members
-------------------------------------------------------------------------------
Guest
The command completed successfully.