1.    24 Sep 2017 #1
    Join Date : Aug 2017
    Posts : 4
    Windows 10 Pro

    Make Windows 10 *always* boot to the lock screen


    I'm currently running Windows 10 Pro version 1607, and have several user accounts defined on my system. Some of the accounts have passwords, and some don't. When an account without a password is the last one to use the computer, windows remembers that and automatically goes straight to the users desktop after boot. I don't like this behavior and always want windows to boot to the lock screen so a user can chose their account.

    Automatically booting into a users desktop is inconvenient to everyone using the system, as they then have to logout that user and then select their account to login.

    I can't find a setting to change this behavior so Windows will automatically boot the lock screen even if the user doesn't have a password. Can this be done?


    Thank-you.
      My ComputerSystem Spec
  2.    24 Sep 2017 #2
    Join Date : May 2015
    Central IL
    Posts : 4,247
    Mac OS Sierra

    It should not be booting to last person logged in. That user without a password should have one set. It defeats the purpose for allowing users to have their own account.

    One of those bugs in Kerbos that was supposed to be patched in July. You may not have gotten the fix since you are running an older version and I am guessing, not letting it update for the security fixes.

    Kerberos bypass, login theft bug slain by Microsoft, Linux slingers • The Register
    Last edited by bro67; 25 Sep 2017 at 10:09.
      My ComputerSystem Spec
  3.    24 Sep 2017 #3
    Join Date : Aug 2017
    Posts : 4
    Windows 10 Pro
    Thread Starter

    No, I'm applying all the fixes Microsoft is offering in widows update. For some reason, I have not been offered the creators update and am still running version 1607. I just haven't bothered to update, but maybe I'll do so if it will solve this issue.

    The fact is Windows *is* booting to the last person logged in. I see it happen every day.

    I would like everyone to have a password, but they don't want one, so that's the system I have.

    So, can I force Windows to boot to the login screen?
      My ComputerSystem Spec
  4.    24 Sep 2017 #4
    Join Date : Aug 2016
    S/E England
    Posts : 4,519
    10 Home x64 (1709) (10 Pro on 2nd pc)

    Welcome to TenForums @Gonzo

    As you have found to your cost, at start up Windows will try to sign in as the last user, and if this is a local account with no password it will go straight in. This is the behaviour you want to avoid. One way to do this is to set a user to automatically log in, but do not give a correct password for that account. You can even set an account that doesn't exist - even a blank user name will do. The effect of setting a blank name to sign in automatically is to boot to this screen.

    Click image for larger version. 

Name:	Other User login.jpg 
Views:	33 
Size:	17.0 KB 
ID:	154913

    Click OK and you go to the sign in screen were your users can type their name and password, or select their account from the list at the lower left. See this tutorial:

    Sign in User Account Automatically at Windows 10 Startup
    Last edited by Bree; 25 Sep 2017 at 00:12.
      My ComputersSystem Spec
  5.    25 Sep 2017 #5
    Join Date : Aug 2017
    Posts : 4
    Windows 10 Pro
    Thread Starter

    That worked. Thanks for the tip. Microsoft should really have a group policy to control this behavior. I had the same accounts on my Windows 7 system, and Microsoft never tried to automatically log a user in - it always booted to the login screen.

    Yes, users should have a password, but if Microsoft allows the no password setup, then they shouldn't automatically login at boot unless there is only that one user defined to the system.
      My ComputerSystem Spec
  6.    25 Sep 2017 #6
    Join Date : Jul 2015
    Posts : 3,748
    10 Pro

    Perhaps you could enforce CTRL+ALT+DEL at log on?

    See: secure-logon-ctrl-alt-del-windows
      My ComputerSystem Spec
  7.    25 Sep 2017 #7
    Join Date : Aug 2017
    Posts : 4
    Windows 10 Pro
    Thread Starter

    Yes, that might also work, but I'm happy with the solution from Bree for now. Clicking 'ok' is easier than CTRL+ALT+DEL.

    Ideally, Microsoft would have a group policy that one can set that prevents the automatic login after boot, so the system will always startup to the lock screen.
      My ComputerSystem Spec
  8.    25 Sep 2017 #8
    Join Date : May 2015
    Central IL
    Posts : 4,247
    Mac OS Sierra

    Quote Originally Posted by Gonzo View Post
    Yes, that might also work, but I'm happy with the solution from Bree for now. Clicking 'ok' is easier than CTRL+ALT+DEL.
    Ideally, Microsoft would have a group policy that one can set that prevents the automatic login after boot, so the system will always startup to the lock screen.
    They do. It is called set a password for all users. Defeats the purpose of having a workstation that a profile has no password and administration rights if set. Just like putting a sign on your front door telling everyone they are welcome into your house and take what they want.
      My ComputerSystem Spec
  9.    25 Sep 2017 #9
    Join Date : Jul 2015
    Posts : 3,748
    10 Pro

    Quote Originally Posted by bro67 View Post
    Just like putting a sign on your front door telling everyone they are welcome into your house and take what they want.
    I disagree with almost all your posts.

    You have excelled yourself here though.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Solved sign-in background appear on restart / boot with Lock Screen disabled
Anyone know how to make the sign-in background appear on restart / boot up with Lock Screen disabled? I had a custom background for sign-in background. It works whenever i locked my screen (after login). However, when i restart or boot up, it...
Customization
Can the lock screen on boot be disabled in Win10 1607
Am I missing something? What's the value of having to click the lock screen to get to the sign-in screen? I had instructions to suppress this in 1511 at http://windows.wonderhowto.com/how-to/disable-lock-screen-windows-10-0162965/ , but it no...
Customization
Boot Lock Screen mouse cursor/kb delay
Recently, i've noticed that everytime windows 10 (x64 pro) starts and gets to the initial lock screen, it takes up to 6 seconds to show the mouse cursor and register keyboard events in order to let me log in. It used to be instantaneous. Is...
General Support
HOWTO? Make an APP start at boot no splash screen in systray
Hi All, HOWTO? Make an APP start at boot no splash screen in systray, any help would be muchly appreciated and i dont mind editing my registry as i have done for many other reasons in the past...
Software and Apps
Windows 10 to make the Secure Boot alt-OS lock out a reality
Source
Windows 10 News
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 18:53.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums