Page 2 of 3 FirstFirst 123 LastLast
  1.    11 Dec 2016 #11
    Join Date : Jul 2015
    SC
    Posts : 145
    Windows 10 Pro

    Screen Login Randomly Popping Up


    Found out what was causing that issue [random going to Login Screen]...it was malware coming in from two fairly used programs...one was Auslogics Defragger the other was Punkbuster. Those two have been hacked and coming through the Firewall using those Firewall exceptions as a back door.
      My ComputerSystem Spec
  2.    06 Aug 2017 #12
    Join Date : Aug 2017
    Posts : 4
    Windows 10

    I had this problem recently. Upgrading to Creator update didn't change anything. I tried the solutions here but nothing worked. I started looking at user accounts. In the GUI there was nothing unusual. Looking at user accounts from command prompt I found a user I did not create called "rose". That user did not show up in the GUI.

    After disabling that user I did not have this problem anymore.

    Do a search for "Disable local user account Windows 10"

    So basically run command prompt as administrator and:

    Code:
    #To list users
    net user
    
    #If you find a user that doesn't look like it should be there like "rose", view details
    net user "rose"
    
    # To deactivate
    net user "rose" /active:no
    
    # To view more account details including activation status
    wmic useraccount list full
    If command prompt is not running as administrator you will not be able to deactivate accounts.

    Details view shows last login time which corresponded to the last time my screen went to login.
    Last edited by samiam123; 06 Aug 2017 at 14:12.
      My ComputerSystem Spec
  3.    06 Aug 2017 #13
    Join Date : Jul 2015
    SC
    Posts : 145
    Windows 10 Pro

    @samiam123 good advice...
      My ComputerSystem Spec
  4.    07 Aug 2017 #14
    Join Date : Aug 2017
    Posts : 4
    Windows 10

    Quote Originally Posted by samiam123 View Post
    I had this problem recently. Upgrading to Creator update didn't change anything. I tried the solutions here but nothing worked. I started looking at user accounts. In the GUI there was nothing unusual. Looking at user accounts from command prompt I found a user I did not create called "rose". That user did not show up in the GUI.

    After disabling that user I did not have this problem anymore.

    Do a search for "Disable local user account Windows 10"

    So basically run command prompt as administrator and:

    Code:
    #To list users
    net user
    
    #If you find a user that doesn't look like it should be there like "rose", view details
    net user "rose"
    
    # To deactivate
    net user "rose" /active:no
    
    # To view more account details including activation status
    wmic useraccount list full
    If command prompt is not running as administrator you will not be able to deactivate accounts.

    Details view shows last login time which corresponded to the last time my screen went to login.
    Unfortunately, this was apparently not my problem. A day later it started doing it again. So I still don't know why this happens. I ran malware and rootkit scanners and nothing was found.

    Now I am thinking maybe it's something to do with Google Chrome. Running out of other ideas.
      My ComputerSystem Spec
  5.    10 Aug 2017 #15
    Join Date : Aug 2017
    Posts : 4
    Windows 10

    I think I finally figured it out. It was still doing it even after I disabled the Win10 lock screen in group policy and in the registry.

    It seems to have finally stopped after I removed the 3389 port forward in my router. I have Win10 Pro with Remote Desktop enabled. So probably a bot or some hacker trying to log into my remote desktop. I guess that triggers a lock screen for some reason. Even when lock screen is disabled. That seems like some sort of bug but at least I figured it out...hopefully.

    The problem is I can't use remote desktop now or will have to maybe put it on a different port. I have a secure password and they would never guess my username. So it would be nearly impossible for someone to get in that way. It's just that annoying lock screen when they try for whatever reason.
      My ComputerSystem Spec
  6.    10 Aug 2017 #16
    Join Date : Aug 2015
    Posts : 369
    Windows 10 Pro

    Quote Originally Posted by samiam123 View Post
    It seems to have finally stopped after I removed the 3389 port forward in my router. I have Win10 Pro with Remote Desktop enabled. So probably a bot or some hacker trying to log into my remote desktop. I guess that triggers a lock screen for some reason. Even when lock screen is disabled. That seems like some sort of bug but at least I figured it out...hopefully.
    Not sure what you mean by "lock screen is disabled". Apparently there's some terminological mix-up involved here, i.e. which specific screen you call "lock screen".

    The original poster was complaining about their computer periodically asking them to re-enter their Windows account password. This screen is what they called "lock screen". And no, it is not possible to "disable" this lock screen. It is a fundamental and essential feature of the OS. What you can do is set up auto-login after boot, which will bypass the lock screen at boot time. But it won't "disable" it. You will still get to the lock screen when you logoff from your Windows account.

    Meanwhile, your explanation with someone trying to log in through Remote Desktop sounds fairly plausible.

    However, Windows does not normally lock out the current interactive user when some other user is trying to login through RD. Windows will always warn the current interactive user about the other login attempt and ask the current user to either allow the switch to RD session or reject it (with 30 seconds time-out, after which it will lock the interactive account and allow the remote user to login). And apparently nothing like that happens in this scenario.

    The only way for a remote RD user to instantly kick out the current interactive user is when the remote user is also you. I.e. the remote RD user is trying to login under your credentials: they know your user name and they know your password. If that's the case, then one thing to try would be to change your password and see whether this strange behavior stops.

    Also, you said that you stopped forwarding port 3389. A more interesting thing to try would be to keep 3389 forwarded, but disable RD access in System Properties. Would that fix the problem?

    Another interesting thing to try would be to stop forwarding 3389, but instead forward another external port (say, 7090) to local port 3389. Would that fix the problem?
      My ComputerSystem Spec
  7.    12 Aug 2017 #17
    Join Date : Aug 2017
    Posts : 4
    Windows 10

    Quote Originally Posted by AndreyT View Post
    Not sure what you mean by "lock screen is disabled". Apparently there's some terminological mix-up involved here, i.e. which specific screen you call "lock screen".

    The original poster was complaining about their computer periodically asking them to re-enter their Windows account password. This screen is what they called "lock screen". And no, it is not possible to "disable" this lock screen. It is a fundamental and essential feature of the OS. What you can do is set up auto-login after boot, which will bypass the lock screen at boot time. But it won't "disable" it. You will still get to the lock screen when you logoff from your Windows account.

    Meanwhile, your explanation with someone trying to log in through Remote Desktop sounds fairly plausible.

    However, Windows does not normally lock out the current interactive user when some other user is trying to login through RD. Windows will always warn the current interactive user about the other login attempt and ask the current user to either allow the switch to RD session or reject it (with 30 seconds time-out, after which it will lock the interactive account and allow the remote user to login). And apparently nothing like that happens in this scenario.

    The only way for a remote RD user to instantly kick out the current interactive user is when the remote user is also you. I.e. the remote RD user is trying to login under your credentials: they know your user name and they know your password. If that's the case, then one thing to try would be to change your password and see whether this strange behavior stops.

    Also, you said that you stopped forwarding port 3389. A more interesting thing to try would be to keep 3389 forwarded, but disable RD access in System Properties. Would that fix the problem?

    Another interesting thing to try would be to stop forwarding 3389, but instead forward another external port (say, 7090) to local port 3389. Would that fix the problem?
    The lock screen I am referring to is the lock screen that is enabled when you press [WIN] + L. Yes it is also the same screen you see locally when someone is logging in remotely so I have changed my password. No idea how someone could have gotten by my username and password for that but it looks like that may be what happened.
    Last edited by samiam123; 12 Aug 2017 at 11:30.
      My ComputerSystem Spec
  8.    19 Aug 2017 #18
    Join Date : Jul 2015
    SC
    Posts : 145
    Windows 10 Pro

    I found my issue (desktop randomly going to Windows Login) using HitmanPro via BleepingComputer.com...it found the Auslogic malware (since have deleted that mess) an Punkbuster (play EA a lot ergo necessary) deleted all the references in Firewall exceptions for PB an started fresh with evenbalance (PB home) haven't had an issue since. Can't say enough about Hitman Pro or BleepingComputer for that matter when it comes to rooting out weird behavior or malware issues, it was definitely malware in my case.
      My ComputerSystem Spec
  9.    17 Oct 2017 #19
    Join Date : Oct 2014
    New Jersey
    Posts : 150
    windows 10

    Updated to fall creators update and starting going to lock screen again after 15 minutes
      My ComputerSystem Spec
  10.    17 Oct 2017 #20
    Join Date : Jul 2015
    SC
    Posts : 145
    Windows 10 Pro

    For starters I would check my Power Settings to see if they have been changed. If the hard drive is set to run a certain number of minutes that could be the culprit.
      My ComputerSystem Spec

 
Page 2 of 3 FirstFirst 123 LastLast


Similar Threads
Thread Forum
Lock screen apps not showing up on lock screen
I've tried searching through the forum but can't see anyone who has a similar issue. I can access the lock screen settings and I can see all available apps and have set a detailed status app and a couple of less detailed ones. However, when I...
Software and Apps
After November update computer goes to lock screen on own
Prior to this update I could and did leave my computer running all day and night and when I come back to it I am always at the desktop, now I sit down and move the mouse and I am back at the lock then login screen. I have checked all the power...
General Support
Lock up screen issues - hang on lock up
Hi All. I have a new one installed Lenovo T450s with Windows 10 Entreprise. I have joined the machine into a domain without some active GPO. When I'm at home or sitting at a customer and must unlock the screen, it takes a war! It is as if...
General Support
Computer boots to Black Screen with Cursor Before Lock Screen
I recently upgraded to Windows 10 from the taskbar on my desktop. The upgrade was successful and I was able to use my computer normally. Today, when I started my computer, a disk check was started. After a long time of being stuck at 10%, I force...
General Support
Solved Lock Screen Preview and Lock Screen nuisance
Can anyone tell me how to eliminate the lock screen preview and bypass the 'Sign In' button on the lock screen? I often put my computer to sleep then to bring it back (in Windows 7) I would simply hit the space bar and turn on my mouse and it...
General Support
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 15:07.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums