How to prevent automatic login of the last user in Windows 10?
The following works for me on Windows 10 Pro x64. It's particularly useful if some accounts don't have passwords.
- Go into the Local Group Policy Editor (you can get there by searching the configuration panel)
- In the navigation panel, click to expand the User Configuration -> Windows Settings -> Scripts (Logon/Logoff)
- In the right panel, double click to open Logon (not Logoff!)
- In the windows that opens, click on Add
- In the Script Name field, input:
C:\Windows\System32\reg.exe - In the Script Parameters field, input:
ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserSwitch /V Enabled /T REG_dWORD /D 1 /F - Click OK and close the window
- Restart the PC (logging out might also suffice)
Now when you login and go to shut down the PC, you will be greeted by the list of user names at the next boot.
I have confirmed this works on my Windows accounts, but only if you put the script at the Logon, not the Logoff, which used to work for Windows 8.x. What this does is change a registry key to enable the User Switch (sets it to 1). Apparently, this registry key gets reset (set back to 0) by another process (likely during logon) and this Policy puts it back to 1.
Source: Option Two of this Eight Forums tutorial
I've found that enabling the user switch via HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserSwitch breaks UAC popups for standard (non-admin) users.
The alternative, hiding the list of users (http://www.tenforums.com/tutorials/9134-sign-screen-do-not-display-user-name-windows-10-a.html) requires typing in the user name.
What worked best for me was to non-intuitively enable auto-signin (http://www.tenforums.com/tutorials/3539-sign-user-account-automatically-windows-10-startup.html). If you put an empty username and password, the sign-in screen will:
- Prompt with user "Other User"
- From here you can click OK
- You can then click whatever family account to sign-in from the bottom left list.
The extra click for the OK was an acceptable compromise for me.