A technician needs to configure laptops so that only administrators can enable virtualization technology if needed. Which of the following should the technician configure?

A guest account typically provides limited access to a system and does not allow users to make changes to BIOS settings or other critical configurations. While it can limit user capabilities, it does not prevent unauthorized access to virtualization settings, making it ineffective for achieving the technician's goal.

A screen lock serves to protect user sessions from unauthorized access when a laptop is idle but does not control access to the BIOS or system configurations. It provides a layer of security during use but does not restrict who can enable virtualization technology, rendering it unsuitable for the technician's needs.

The AutoRun setting pertains to the automatic execution of programs from removable media and has no relation to BIOS configurations or the enabling of virtualization technologies. Modifying this setting would not affect user permissions regarding BIOS access, making it irrelevant to the technician's objective.