Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was wondering if there is a way besides in the registry to keep the last username from showing up on a new log in for a win7 computer on a domain.

We have a few laptops that keep defaulting back to administrator upon new login and I found that you can modify this registry key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System dontdisplaylastusername

I am just curious if there is an alternative to making the log in box blank besides there. Thank you.

share|improve this question
up vote 1 down vote accepted

You can set a GPO to manage this behavior. It toggles the same registry key, but it's much easier to manage. It's in the security policy section under Computer policy.

share|improve this answer

There is a group policy item that can be set, either locally or from a domain controller:

To do it on the PC, run gpedit.msc, browse to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options and look for 'Interactive login: Do not display last user name' and set it to 'enabled'.

share|improve this answer

If these computers are in fact joined to a Windows AD domain then you can set this in Group Policy.

Computer Configuration>Windows Settings>Security Settings>Local Policies>Security Options>Interactive logon:Do not display last user name.

Note that this is a computer setting and needs to be set in the GPO that applies to the computer.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.