Posted on by harlan

Group Policy Security Tip: “Do Not Display Last User Name” at Logon

One Group Policy setting I always enable is Interactive logon: Do not display last user name. If the logon screen shows the last user name, you’re handing anyone at the keyboard half the credentials they need.

Where to Find the Setting

Computer Configuration
  Policies
    Windows Settings
      Security Settings
        Local Policies
          Security Options
PolicySetting
Interactive logon: Do not display last user nameEnabled

Link the GPO to the OUs containing your servers and workstations, and users will have to type both their user name and password at logon.