This article describes how to prevent the last logged-on user name from being displayed. After you use this method, a user must type a user name and password to log on to a Windows 2000-based computer. The default setting is to remember the name of the last logged-on user and automatically include this name in the logon dialog box. Security administrators may prefer the last logged-on user name not to appear in the logon dialog box. Although this configuration requires users to type their user name each time they log on, it can help to prevent attempts by unauthorized users to gain access to the computer.
You can configure Windows 2000 to remove references to the last logged-in user by using Group Policy. The group policy can apply to the local computers, sites, domains, and organizational units.
How to Prevent the Last Logged-On User Name from Being Displayed
- Click Start, click Run, type mmc, and then click OK.
- On the Console menu, click Add/Remove Snap-in.
- Click Add.
- Click the Group Policy snap-in, and then click Add.
- Click the target Group Policy object (GPO). The default setting is the local computer. Click Browse to select other GPOs that are available on the network. Click Finish.
- Click Close, and then click OK.
- Expand the Computer Configuration node, the Windows Settings node, and the Security Settings node.
- Expand the Local Policies node, and then click Security Options.
- In the right pane, double-click the Do not display last user name in logon screen entry.
- Click Enabled.
- Click OK.
- Close the Group Policy console and restart the computer.
Microsoft Windows NT 4.0-based computers do not support Windows 2000 Group Policy. For additional information about removing the last logged-on user name from the logon dialog box in Windows NT 4.0, click the article number below to view the article in the Microsoft Knowledge Base:
114463 For additional information about troubleshooting group policies, click the article number below to view the article in the Microsoft Knowledge Base:
Hiding the Last Logged On Username in the Logon Dialog
Windows 2000 Client May Not Apply Group Policies