I am tempted to enable "Don't Display Username" in Domain Policy, but want to be sure that it will still be applied on my laptop when it cannot connect to the domain server. Will the domain policy be cached locally, or am I better off implementing this locally (at least on the laptop)?
According to this article, this should have worked the way I wanted it to. However, the question appears to be moot. My installation of Windows 10 Pro x64 20H2 had "Interactive logon: Don't display last signed-in" "Disabled" by default, which was apparently overriding my domain-level policy. There wasn't even an option to leave it locally "Not Defined"! The only options in gpedit.msc and secpol.msc are "Disabled" and "Enabled". So I had to enable it locally anyway.
According to this Microsoft article, my domain-level policy should have taken precedence, but it didn't.
However, this thread suggests to me that this is not an isolated failure of the stated order of precedence, although I don't claim to understand it all.
Last edited by rsbrux; 08 Apr 2021 at 00:20.
Quote