Skip new Windows 7 user selection and go to login prompt
Apply following GPO's: Group Policy Management
Create or select the "Default Domain Policy", Edit
Once the 'Group Policy Management Editor' is opened, make 4 modifications
Computer Config - Policies - Window Settings - Security Options - 'Interactive Login: Do not display last user name' = Enable
Computer Config - Policies - Window Settings - Security Options - 'Interactive Login: Do not require Ctrl+Atl+Del' = Disable
Then
Computer Config - Policies - Administrative Templates - Logon - 'Hide entery points for Fast User Switching' - Enable
Computer Config - Policies - Administrative Templates - Logon - 'Always use classic logon' - Enabled - Enable
Related videos on Youtube
Doltknuckle
Updated on September 17, 2022Comments
-
Doltknuckle over 1 year
We've begun our migration to windows 7 and we ran into an interesting issue. When we hit "CTRL+ALT+DEL" we are brought to the "User selection Screen". Normally, this screen will have an icon for every local user for the machine. These machines are Domain members with "Fast User Switch" disabled so no user names are listed only the "Other User" option. If you click "Other User" or hit enter, the system moves on to the normal login screen where it prompts for user name and password.
Here's the issue: We want to find a way to skip over the part where a user selects "Other User". We essentially want the system to always assume that we always want "Other User" and to go directly to the login screen when a user hits "CTRL+ALT+DEL".
What I find odd is that the "Other User" doesn't show up until we've had more than one domain user log in. Right after we re-image the machine, the login process goes directly to the user credential prompt.
[EDIT]
Security Policies set by Active Directory:
- Interactive logon: Do not display last user name = Enabled
- Interactive login: Do not require CTRL + ALT + DEL = Disabled
[End Edit]
Anyone have any ideas?
-
Doltknuckle over 13 yearsI don't see the "Change the way users log on/off" option. This is a domain machine so I don't know if that makes a difference.
-
Doltknuckle over 13 yearsI only have the "S-1-5-18" through "S-1-5-20" keys as well as the five (5) "S-1-5-21" user accounts on this machine. There are no duplicates or ".bak" keys.
-
Doltknuckle over 13 yearsDoes this change a registry setting? This option is set to "not configured" in Group Policy on the Domain. Getting that changed would require justifying it to the head of IT, which is a pain.
-
nhinkle over 13 yearsHm, odd. Do you have any custom credential providers registered? You might want to try exporting the
HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon
andHKLM\Software\Microsoft\Windows\CurrentVersion\Policies
keys, then do a diff against the same export from a newly imaged machine, and see if there are any differences which might indicate what's being changed. Those two keys are where settings like hide last username, etc. are stored, so it could be something in there. -
nhinkle over 13 yearsAny luck finding any differences in those registry keys? Or any other solutions?
-
Doltknuckle about 13 yearsThe "Always use classic logon" only applies when the machine is not part of a domain if the description in gpedit is correct. These are Domain computers. Thanks for the suggestion though.
-
Falcon Momot over 8 yearsIndeed, but this does not scale.