Tuesday, December 22, 2015

Forcing Domain Workstations to Show Local Users on the Sign-in Screen

Your domain users may find it necessary to log back into a local account. This is simple enough with the .\ trick (prefixing a username with that in the Windows logon UI makes Windows look for a local account instead of one from the domain), but your users might be confused or just inconvenienced by typing weird characters in the username field, or they might not remember their username (especially if it was created as a Microsoft account).

There is a Group Policy setting that can help with this. It's called "Enumerate local users on domain-joined computers" in Logon under System in the Computer Configuration's Administrative Templates. Enable that, and the logon UI will display all local user accounts.

Note that this only works for Windows 8 and above.

No comments:

Post a Comment