There is a separate group policy setting that makes it much easier to list local users account on the Welcome screen of the domain-joined computers. If the task is successfully triggered, but the list of local users is not displayed, make sure if the policy Interactive Logon: Do not display last username (see Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options) is disabled. Instead of the standard user icons, you can configure the user profile photo from Active Directory to be displayed. Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserSwitch' -Name EnabledĪfter the next reboot, all local user accounts will be displayed on Windows 10/8.1 logon screen instead of the last one. Check the current value of the parameter. The task must start automatically and change the value of Enabled registry parameter to 1. Make sure that the task appeared in Windows Task Scheduler (taskschd.msc). Register-ScheduledTask -TaskName "UserSwitch_Enable" -Trigger $Trigger -User $User -Action $Action -RunLevel Highest –Force $Action= New-ScheduledTaskAction -Execute "PowerShell.exe" -Argument "Set-ItemProperty -Path HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserSwitch -Name Enabled -Value 1" $Trigger= New-ScheduledTaskTrigger -AtLogOn In our case, the commands to create a new task may look as follows: But it seems to me that it is much easier to create a Scheduler task using PowerShell. You can create this task manually using the taskschd.msc graphic console. The Scheduler task must run one of the commands shown above. In order to always change the registry value to 1, it’s easier to create a new task in the Task Scheduler that will run at user logon. However, the Windows automatically resets the value of the Enabled parameter to 0 at each user logon. Set-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserSwitch' -Name Enabled -Value 1 Reg Add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserSwitch /v Enabled /t REG_DWORD /d 1 /f You can change this parameter through the RegEdit GUI, Reg Add cli command or Set-ItemProperty PowerShell cmdlet: To display all local users on the Windows login screen, you need to change the value of Enabled parameter to 1 in the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserSwitch. To log in to the computer, the user just needs to click on the desired account and specify its password. In Windows 10 / 8.1, you can list all local user accounts on the welcome screen. How to Show All Local User Account on Login Screen in Windows 10? Now on the computer login screen and on the Windows lock screen, an empty fields for entering a username and password are displayed. To do this, in the same GPO section you need to enable the policy “ Interactive logon: Display user information when the session is locked” and select the value “ Do not display user information”.Ī registry parameter named DontDisplayLockedUserId in the same registry key with a value of 3 corresponds to this policy setting. To do this go to the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System, create a new DWORD parameter named dontdisplaylastusername with the value 1.Īdditionally, you can hide the username on a locked computer. By default, this policy is disabled.Īlso, you can hide the username on the login screen through the registry. Enable the policy “ Interactive logon: Do not display last user name”. Open the domain (gpmc.msc) or local (gpedit.msc) Group Policy editor and go to the section Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options. You can hide the last logged user name on a Windows welcome screen through the GPO. An attacker who gained local access to a computer will have to pick up only a password (for this there are various ways of social engineering, brute force attacks, or a banal sticker with a password on the monitor). How to Hide User Account from Windows Logon Screen?ĭisplaying the account name on the Windows login screen is convenient for users, but reduces the computer security. You can configure different behavior of this function: you can show the last logon username, hide it, or even list all local or logged domain users. However, it is possible to display all user accounts on the welcome screen in Windows 10. By default, the logon screen in Windows 10/8.1 and Windows Server 2016/2012 R2 displays the account of the last user who logged in to the computer (if the user password is not set, this user will be automatically logged on, even if the autologon is not enabled).
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |