The Windows login screen is the gateway to your computer, and it often displays the last user who logged in by default. However, this can pose security risks and may not always be ideal for shared or public computers. In this comprehensive guide, we will explore various methods to customize the user display on the Windows login screen to suit your needs. Please see Display logon banners for Windows PCs via Windows Registry, How to make a screenshot of Windows 10 Screen / Login Screen, How to prevent the on-screen keyboard from starting automatically and from appearing at login, and Windows sign-in options and account protection on Windows 11.
Hiding the Last Username on Windows Logon Screen
Displaying the last logged-in username on the Windows login screen can be convenient but risky, as it can make it easier for unauthorized users to access your computer. To hide the last username, follow these steps:
Using Group Policy Editor (GPO):
Press Win + R, type gpedit.msc, and hit Enter to open the Group Policy Management Console.
Navigate to the following path:
Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options
Enable the policy “Interactive logon: Don’t display last signed-in” (this policy is disabled by default).
Using Registry Editor:
Press Windows key and type regedit, to open the Registry Editor in the Start menu.
Navigate to the following registry path:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Create a new DWORD parameter named dontdisplaylastusername with a value of 1.
Hiding Username on Computer Lock Screen
To hide the username on the computer lock screen (triggered by Win+L or lock screen GPO), follow these steps:
Using Group Policy Editor (GPO):
Press Win + R, type gpedit.msc, and hit Enter to open the Group Policy Management Console.
Navigate to the following path:
Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options
Enable the policy “Interactive logon: Display user information when the session is locked” and set the value to “Do not display user information.”
Using Registry Editor:
In the Registry Editor, find the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Locate or create a DWORD parameter named DontDisplayLockedUserId and set its value to 3.
Now, both the computer login screen and lock screen will display blank username and password fields.
Showing All Users on Windows 10/11 Sign-in Screen
By default, Windows 10 and 11 display a list of enabled local users on the login screen. To ensure this list is visible, follow these steps:
Using Group Policy Editor (GPO):
Press Win + R, type gpedit.msc, and hit Enter to open the Group Policy Management Console.
Confirm that “Interactive Logon: Do not display last signed-in” is set to Disabled in Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options.
Navigate to the following path:
Computer Configuration -> Administrative Templates -> System -> Logon
Enable “Enumerate local users on domain-joined computers“
Ensure “Do not enumerate connected users on domain-joined computer” is Disabled or Not Configured in the same GPO section.
Restart your computer to apply the new Group Policy settings. This should display the list of local users on the login screen.
Showing Logged In Domain Users on Windows Login Screen
If your computer is used by multiple domain users, you can display a list of users with active sessions on the welcome screen. To achieve this, follow these steps:
Using Group Policy Editor (GPO):
Press Win + R, type gpedit.msc, and hit Enter to open the Group Policy Management Console.
Ensure the following policies under Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options are set to Disabled:
- Interactive logon: Don’t display last signed-in
- Interactive logon: Don’t display username at sign-in
Also, disable the policies in Computer Configuration -> Administrative Templates -> System -> Logon:
- Block user from showing account details on sign-in
- Do not enumerate connected users on domain-joined computer
After applying these changes, the welcome screen will display a list of logged-on users, including those with active sessions.
Please note that Group Policy settings on domain computers may be managed by domain administrators, so ensure that local GPO settings are not overridden by domain GPOs using tools like rsop.msc or gpresult.
Hiding Specific User Accounts from the Sign-in Screen
If you want to hide specific user accounts from the Windows login screen, you can do so through the registry. Follow these steps:
Using Registry Editor:
Open the Registry Editor (regedit), and navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\WinlogonRight-click on the Winlogon key and select New > Key name the SpecialAccounts. Right-click the SpecialAccount key and create a New > Key named UserList.
Create a new DWORD32 parameter for each user you want to hide. Set the username as the parameter name and its value as 0.
To show a hidden user on the login screen again, either delete the registry parameter or change its value to 1.
Conclusion on how to Hide or Show User Accounts from Login Screen
Customizing the Windows login screen can enhance security and user experience based on your specific requirements. Follow these steps carefully to tailor the login screen to your needs while maintaining the desired level of security.
FAQs Relating Hiding or Showing Windows User Accounts from the Login Screen
You can hide the last logged-in username on the Windows login screen by using either the Group Policy Editor (GPO) or the Registry Editor. To achieve this through GPO, open the Group Policy Management Console (gpmc.msc), navigate to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options, and enable the policy “Interactive logon: Do not display last user name.” Alternatively, using the Registry Editor, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System, and create a new DWORD parameter named dontdisplaylastusername with a value of 1.
Yes, by default, modern versions of Windows display a list of all enabled local users on the login screen. However, to ensure this list is visible, you may need to confirm certain Group Policy settings. Open the Group Policy Management Console (gpmc.msc), ensure that “Interactive Logon: Do not display last signed-in” is set to Disabled under Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options. Also, enable “Enumerate local users on domain-joined computers” in Computer Configuration -> Administrative Templates -> System -> Logon.
To hide specific user accounts from the Windows login screen, you can make changes in the Registry Editor. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList, and create a new DWORD parameter for each user you want to hide. Set the username as the parameter name and its value as 0. This will hide those specific user accounts. To reverse this and show a hidden user on the login screen again, either delete the registry parameter or change its value back to 1.
I hope you found this article useful on how to Hide or Show User Accounts from Login Screen on Windows. Please let me know in the comment section if you have any questions.