Make Windows 10 *always* boot to the lock screen


  1. Posts : 8
    Windows 10 Pro
       #1

    Make Windows 10 *always* boot to the lock screen


    I'm currently running Windows 10 Pro version 1607, and have several user accounts defined on my system. Some of the accounts have passwords, and some don't. When an account without a password is the last one to use the computer, windows remembers that and automatically goes straight to the users desktop after boot. I don't like this behavior and always want windows to boot to the lock screen so a user can chose their account.

    Automatically booting into a users desktop is inconvenient to everyone using the system, as they then have to logout that user and then select their account to login.

    I can't find a setting to change this behavior so Windows will automatically boot the lock screen even if the user doesn't have a password. Can this be done?


    Thank-you.
      My Computer

  2. bro67's Avatar
    Posts : 8,351
    Mac OS Catalina
       #2

    It should not be booting to last person logged in. That user without a password should have one set. It defeats the purpose for allowing users to have their own account.

    One of those bugs in Kerbos that was supposed to be patched in July. You may not have gotten the fix since you are running an older version and I am guessing, not letting it update for the security fixes.

    Kerberos bypass, login theft bug slain by Microsoft, Linux slingers • The Register
    Last edited by bro67; 25 Sep 2017 at 10:09.
      My Computers


  3. Posts : 8
    Windows 10 Pro
    Thread Starter
       #3

    No, I'm applying all the fixes Microsoft is offering in widows update. For some reason, I have not been offered the creators update and am still running version 1607. I just haven't bothered to update, but maybe I'll do so if it will solve this issue.

    The fact is Windows *is* booting to the last person logged in. I see it happen every day.

    I would like everyone to have a password, but they don't want one, so that's the system I have.

    So, can I force Windows to boot to the login screen?
      My Computer

  4. Bree's Avatar
    Posts : 18,763
    10 Home x64 (20H2) (10 Pro on 2nd pc)
       #4

    Welcome to TenForums @Gonzo

    As you have found to your cost, at start up Windows will try to sign in as the last user, and if this is a local account with no password it will go straight in. This is the behaviour you want to avoid. One way to do this is to set a user to automatically log in, but do not give a correct password for that account. You can even set an account that doesn't exist - even a blank user name will do. The effect of setting a blank name to sign in automatically is to boot to this screen.

    Make Windows 10 *always* boot to the lock screen-other-user-login.jpg

    Click OK and you go to the sign in screen were your users can type their name and password, or select their account from the list at the lower left. See this tutorial:

    Sign in User Account Automatically at Windows 10 Startup
    Last edited by Bree; 25 Sep 2017 at 00:12.
      My Computers


  5. Posts : 8
    Windows 10 Pro
    Thread Starter
       #5

    That worked. Thanks for the tip. Microsoft should really have a group policy to control this behavior. I had the same accounts on my Windows 7 system, and Microsoft never tried to automatically log a user in - it always booted to the login screen.

    Yes, users should have a password, but if Microsoft allows the no password setup, then they shouldn't automatically login at boot unless there is only that one user defined to the system.
      My Computer

  6. lx07's Avatar
    Posts : 5,479
    2004
       #6

    Perhaps you could enforce CTRL+ALT+DEL at log on?

    See: secure-logon-ctrl-alt-del-windows
      My Computer


  7. Posts : 8
    Windows 10 Pro
    Thread Starter
       #7

    Yes, that might also work, but I'm happy with the solution from Bree for now. Clicking 'ok' is easier than CTRL+ALT+DEL.

    Ideally, Microsoft would have a group policy that one can set that prevents the automatic login after boot, so the system will always startup to the lock screen.
      My Computer

  8. bro67's Avatar
    Posts : 8,351
    Mac OS Catalina
       #8

    Gonzo said:
    Yes, that might also work, but I'm happy with the solution from Bree for now. Clicking 'ok' is easier than CTRL+ALT+DEL.
    Ideally, Microsoft would have a group policy that one can set that prevents the automatic login after boot, so the system will always startup to the lock screen.
    They do. It is called set a password for all users. Defeats the purpose of having a workstation that a profile has no password and administration rights if set. Just like putting a sign on your front door telling everyone they are welcome into your house and take what they want.
      My Computers

  9. lx07's Avatar
    Posts : 5,479
    2004
       #9

    bro67 said:
    Just like putting a sign on your front door telling everyone they are welcome into your house and take what they want.
    I disagree with almost all your posts.

    You have excelled yourself here though.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 16:29.
Find Us




Windows 10 Forums