Solved Hide User in winlogon (active directory)

[mafia1990]

Hi

I want to know how can I hide a user account in the login screen. User is in an “Active Directory”.

I know to do this , I need change some registry keys :

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList

But this method not work when system use “Active Directory”!

 

[GokAy]

What's your purpose to do this? As far as I know (been a long time since I saw a domain), only the accounts that have logged in on that particular machine is listed (or perhaps only the last logon).

You should be using group policy (gpedit.msc) I believe, see if:
Computer Configuration - Windows Settings - Security Settings - Local Policies - Security options - "Interactive logon: Do not display last user name" set to enable will do the job.

You can enable this only to a certain machine or a group of machines.

 

[mafia1990]

Thanks for your reply
This is partly solved my problem
But there is a problem with “other user” that I can’t remove it

I tried this methods:
Hide entry points for Fast User Switching
Interactive logon: Do not display last user name

but these methods not work when user is member of an AD domain

 

[GokAy]

Run in the computer that you are experimenting: rsop.msc
This will show you the effective group policy settings. What does it say for "Interactive Logon: Do not dosplay last user name"?

Did you restart the PC?

This is the proper method to enforce in a domain environment, if it isn't working then you are doing something wrong.
See Do not display last user name Windows setting (dontdisplaylastusername), it has a bit more info and the registry change that does the same thing (maybe you would like that more)

 

[mafia1990]

look GokAy
this is my screen login ==>screen.jpg(attached)
and this is rsop result ===> rsop.jpg(attached)

i want to remove "other user"
but this methods not remove that

"tnx for hidden user account and your link(it was useful) "

 

[GokAy]

You are looking at the wrong place in rsop.msc, check my first post (#2)

Also it is working, amir1 is your domain name or computer name. That part is needed to specify if you want to logon using a domain or local account.

Is it clear now?

 

[mafia1990]

yes ,sry for that
domain name =amir1
pc name= amir

 

[GokAy]

It is alright, learning is a part of the process

Did you use the group policy or registry to disable display of last logon? I can't see it in your last screenshot (is that rsop or gpedit?)

 

[mafia1990]

this is rsop
and
I used this methods:
Do not display last user name (group policy)
dontdisplaylastname (regedit)


but i think this methods make other users enabled instead disable

 

[GokAy]

It will only work on the PC you have enabled the "Interactive logon: Disable ..."
But if you want other PCs with same setting, you can use group policy on your Domain Controller (opening a new mmc.msc and adding group policy snap-in should work too) to create an OU (organizational unit) which includes the PCs you want and applying the setting to that OU instead. I believe you can find many resources about group policy online.

This is good as a starter - https://en.m.wikipedia.org/wiki/Group_Policy

 

[mafia1990]

i mean how remove 'Other user' login screen

 

[GokAy]

See if this helps http://www.sevenforums.com/tutorial...showing-only-other-user-last-logged-user.html

 

[mafia1990]

This is partly solved my problem