Make Windows 10 always boot to the lock screen

Gonzo · 24 Sep 2017

I'm currently running Windows 10 Pro version 1607, and have several user accounts defined on my system. Some of the accounts have passwords, and some don't. When an account without a password is the last one to use the computer, windows remembers that and automatically goes straight to the users desktop after boot. I don't like this behavior and always want windows to boot to the lock screen so a user can chose their account.

Automatically booting into a users desktop is inconvenient to everyone using the system, as they then have to logout that user and then select their account to login.

I can't find a setting to change this behavior so Windows will automatically boot the lock screen even if the user doesn't have a password. Can this be done?

Thank-you.

bro67 · 24 Sep 2017

It should not be booting to last person logged in. That user without a password should have one set. It defeats the purpose for allowing users to have their own account.

One of those bugs in Kerbos that was supposed to be patched in July. You may not have gotten the fix since you are running an older version and I am guessing, not letting it update for the security fixes.

Kerberos bypass, login theft bug slain by Microsoft, Linux slingers â€¢ The Register

Gonzo · 24 Sep 2017

No, I'm applying all the fixes Microsoft is offering in widows update. For some reason, I have not been offered the creators update and am still running version 1607. I just haven't bothered to update, but maybe I'll do so if it will solve this issue.

The fact is Windows *is* booting to the last person logged in. I see it happen every day.

I would like everyone to have a password, but they don't want one, so that's the system I have.

So, can I force Windows to boot to the login screen?

Bree · 24 Sep 2017

Welcome to TenForums @Gonzo

As you have found to your cost, at start up Windows will try to sign in as the last user, and if this is a local account with no password it will go straight in. This is the behaviour you want to avoid. One way to do this is to set a user to automatically log in, but do not give a correct password for that account. You can even set an account that doesn't exist - even a blank user name will do. The effect of setting a blank name to sign in automatically is to boot to this screen.

Make Windows 10 *always* boot to the lock screen-other-user-login.jpg

Click OK and you go to the sign in screen were your users can type their name and password, or select their account from the list at the lower left. See this tutorial:

Sign in User Account Automatically at Windows 10 Startup

Gonzo · 25 Sep 2017

That worked. Thanks for the tip. Microsoft should really have a group policy to control this behavior. I had the same accounts on my Windows 7 system, and Microsoft never tried to automatically log a user in - it always booted to the login screen.

Yes, users should have a password, but if Microsoft allows the no password setup, then they shouldn't automatically login at boot unless there is only that one user defined to the system.

lx07 · 25 Sep 2017

Perhaps you could enforce CTRL+ALT+DEL at log on?

See: secure-logon-ctrl-alt-del-windows

Gonzo · 25 Sep 2017

Yes, that might also work, but I'm happy with the solution from Bree for now. Clicking 'ok' is easier than CTRL+ALT+DEL.

Ideally, Microsoft would have a group policy that one can set that prevents the automatic login after boot, so the system will always startup to the lock screen.

bro67 · 25 Sep 2017

Gonzo said:

Yes, that might also work, but I'm happy with the solution from Bree for now. Clicking 'ok' is easier than CTRL+ALT+DEL.
Ideally, Microsoft would have a group policy that one can set that prevents the automatic login after boot, so the system will always startup to the lock screen.

They do. It is called set a password for all users. Defeats the purpose of having a workstation that a profile has no password and administration rights if set. Just like putting a sign on your front door telling everyone they are welcome into your house and take what they want.

lx07 · 25 Sep 2017

bro67 said:

Just like putting a sign on your front door telling everyone they are welcome into your house and take what they want.

I disagree with almost all your posts.

You have excelled yourself here though.

Make Windows 10 *always* boot to the lock screen