000034180 - How to disable or enable the Other Users tile on the logon screen on a Windows machine protected by RSA Authentication Agent for Windows

Document created by RSA Customer Support Employee on Nov 30, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000034180
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: Authentication Agent for Windows
RSA Version/Condition: 7.x
IssueThis article provides steps to remove the "other users" login tile that appears when logging in to a Windows machine but keep the username tiles or remove the users' tiles and only keep other users.
TasksTo complete this a few entries in the Group Policy need to be modified.
Resolution

To disable the Other Users tile


  1. Click Start and in the Run box, type gpedit.msc then press Enter. This opens the Local Group Policy Editor with the top-level Local Group Policy object open for editing.
  2. In the editor, expand Local Computer Policy > Computer Configuration > Administrative Templates > SystemLogon
  3. Double-click Always Use Classic Logon.
  4. Select Enabled, and then click OK
  5. In the editor, expand Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options
  6. Double-click Interactive logon: Do not display last username
  7. Select Disable, and then click OK
  8. Restart the machine or open a command prompt as administrator and run the command gpupdate /force.
Notice: This will show all user IDs stored on that machine, thus the user can click on his tile directly and enter his password or passcode.

To enable the Other Users tile


  1. Invert the two policies above.
  2. Restart the machine or open a command prompt as administrator and run the command gpupdate /force.
Notice: This will only show the other users logon tile.
NotesFor Windows 7 Home and Basic Machines, there is no Group Policy editor (gpedit.msc), so we need to edit those entries through the registry:
  1. Click Start, type regedit.
  2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.
  3. Double-click on dontdisplaylastusername in the right pane and then modify the value to 1.
  4. Alternatively, copy the text below into a text editor, save it with the extension .reg and execute it.  A sample file is attached to this article.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
“dontdisplaylastusername”=dword:00000001

This will disable the Other Users logon tile.

Attachments

Outcomes