Hide User in winlogon (active directory)

Hi

I want to know how can I hide a user account in the login screen. User is in an “Active Directory”.

I know to do this , I need change some registry keys :

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList

But this method not work when system use “Active Directory”!

Thanks for your reply
This is partly solved my problem
But there is a problem with “other user” that I can’t remove it

I tried this methods:
Hide entry points for Fast User Switching
Interactive logon: Do not display last user name

but these methods not work when user is member of an AD domain

Run in the computer that you are experimenting: rsop.msc
This will show you the effective group policy settings. What does it say for "Interactive Logon: Do not dosplay last user name"?

Did you restart the PC?

This is the proper method to enforce in a domain environment, if it isn't working then you are doing something wrong.
See Do not display last user name Windows setting (dontdisplaylastusername), it has a bit more info and the registry change that does the same thing (maybe you would like that more)

look GokAy
this is my screen login ==>screen.jpg(attached)
and this is rsop result ===> rsop.jpg(attached)

i want to remove "other user"
but this methods not remove that

"tnx for hidden user account and your link(it was useful) "

You are looking at the wrong place in rsop.msc, check my first post (#2)

Also it is working, amir1 is your domain name or computer name. That part is needed to specify if you want to logon using a domain or local account.

Is it clear now?

yes ,sry for that
domain name =amir1
pc name= amir

It is alright, learning is a part of the process :)

Did you use the group policy or registry to disable display of last logon? I can't see it in your last screenshot (is that rsop or gpedit?)

this is rsop
and
I used this methods:
Do not display last user name (group policy)
dontdisplaylastname (regedit)


but i think this methods make other users enabled instead disable

It will only work on the PC you have enabled the "Interactive logon: Disable ..."
But if you want other PCs with same setting, you can use group policy on your Domain Controller (opening a new mmc.msc and adding group policy snap-in should work too) to create an OU (organizational unit) which includes the PCs you want and applying the setting to that OU instead. I believe you can find many resources about group policy online.

This is good as a starter - https://en.m.wikipedia.org/wiki/Group_Policy