By design, and as expected behavior, the Guest account cannot Open an
Internet connection. it can Use an open connection. If you want the user to
have that ability, create a new standard account named "MyGuest" and create
a connection set to be shared by all users. Practically the only difference
between Guest and a standard user is this right. Using the 'runsa' admin
commands to do it exposes the admin password to the Guest, and defeats the
idea of limiting a Guest at all.