Configure the login and Welcome Screen in Vista

5 October 2007 by Snakefoot | Comment » | Trackback Off
The Welcome Screen is enabled by default and is shown at startup, where one can choose one of the available user-accounts (Just like in WinXP).
Secure login screen with CTRL + ALT + DEL before login
  1. Press the Start-button and run this command:

    netplwiz.cpl

    Note the following command should give the same result:

    control userpasswords2

  2. Change to the Advanced-tab and enable Require users to press CTRL+ALT+DEL

    This change should match the following DWORD registry setting:

    [HKEY_LOCAL_MACHINE \SOFTWARE \Microsoft \Windows NT \CurrentVersion \Winlogon]
    DisableCAD = 0

    This change should also match the following Local Security Policy -> Local Policies -> Security Options -> "Interactive logon: Do not require CTRL+ALT+DEL".

Note after pressing CTRL + ALT + DEL then the normal Welcome Screen will show with all the pretty user account icons.
Only display the user name and password prompt at login
  1. Open Control Panel and select System and Maintenance
  2. Select Administrative Tools and double-click Local Security Policy
  3. Expand Local Policies to Security Options
  4. Enable Interactive logon: Do not display last user name

    This change should match the following DWORD registry setting:

    [HKEY_LOCAL_MACHINE \Software \Microsoft \Windows \CurrentVersion \Policies \System]
    DontDisplayLastUserName = 1

Now it will only display the input fields for username and password, and it will no longer display all the available accounts with their user names and icons.
Hide a single user account from the Welcome Screen
By adding the username of the account to a special list in the registry, then it will no longer appear on the Welcome Screen. Just create DWORD registry value at the following location:

[HKEY_LOCAL_MACHINE \SOFTWARE \Microsoft \Windows NT \CurrentVersion \Winlogon \SpecialAccounts \UserList]
NameOfTheUser = 0 (1 = Show, 0 = Hide)

More Info MS KB942956

Note in Vista the Administrator account is disabled by default and when activated, then it will be displayed on the Welcome Screen automatically. More Info MS KB 926183
Customize the picture shown on the Welcome screen
To change the picture shown on the logon screen for a user:
  1. Open Control Panel and select User Accounts-
  2. Click Change Your Picture and select the picture you want.
Note the available user account pictures are located in the following directory:

C:\ProgramData\Microsoft\User Account Pictures\Default Pictures

Note the default user account picture is located here (Can be replaced with another 128x128 pixel bmp image):

C:\ProgramData\Microsoft\User Account Pictures\user.bmp

Note the picture currently selected by the user is located here:

C:\Users\<username>\AppData\Local\Temp\<username>.tmp.bmp

Disable the Welcome Screen by enabling automatic login
Automatic Login can be enabled with the following steps, so the Welcome Screen is not shown at startup:
  1. Run this this command to open the advanced user management:

    netplwiz.cpl

  2. Uncheck "Users must enter a username and password to use this computer" and provide the username and password for the account to use by default.
Credits Rob Farley

Updated: 17 June 2008

Comments:

Comment by Bill - 31 December 2007 @ 18:49 Reply

This does not explain how to customize the Vista Logon SCREEN! @$%#
This will merely change the user’s account picture.

Comment by Snakefoot - 3 January 2008 @ 22:09 Reply

Bill
This does not explain how to customize the Vista Logon SCREEN!

Well after wielding my google powers this came up Stardock’s LogonStudio Vista, Vistelangancy For Vista and Change Logon Screen Background

Comment by drew - 10 June 2008 @ 22:59 Reply

what if you want to add the user name profile to home prem. logon screen and you can not find the option for local security policy? per your instructions?

Comment by ern - 16 June 2008 @ 22:46 Reply

The “Hide a single user account from the Welcome Screen” is dangerous. If you’re not careful, you can lock yourself out for good.

Comment by Snakefoot - 17 June 2008 @ 3:30 Reply

ern
The “Hide a single user account from the Welcome Screen” is dangerous. If you’re not careful, you can lock yourself out for good.

It should be possible to boot into safe mode (Press F8 at startup), and it will allow you to logon with an administrator account.

Leave a comment


You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>