Author Topic: Understand and Configure the Welcome Screen and Classic Logon Screen  (Read 3767 times)

0 Members and 1 Guest are viewing this topic.

Offline Nick

  • Administrator
  • Platinum Member
  • *
  • Posts: 46028
  • Karma: +1000/-0
  • Gender: Male
  • NickCS
    • http://www.facebook.com/nickcomputerservices
    • http://www.twitter.com/nickcomputer
    • Computer Chiangmai

Understand and Configure the Welcome Screen and Classic Logon Screen

Explore how the Welcome screen differs from the Logon screen, and discover some options you can tweak for controlling how users log on.


By default, Windows 7 displays a Welcome screen when a computer is part of a homegroup or workgroup and it displays a Logon screen when a computer is part of a domain.

The Welcome screen provides a list of accounts on the computer. To log on with one of these accounts, you click the account and type a password (if one is required). Note that the Welcome screen does not display all the accounts that have been created on the computer. Some accounts, such as Administrator, are hidden from view. The Welcome screen is convenient because it displays a list of available accounts. But to enhance security in a homegroup or workgroup, you can use the Logon screen instead of the Welcome screen—therefore not displaying a list of accounts.

The Logon screen requires users to type a logon name rather than selecting an account from a list of available accounts. The Logon screen has several features that you can control. By default, the name of the last user to log on is displayed in the User Name field of the Log On To Windows dialog box. You can improve security by hiding the user name of the last user to log on. Instead, users will need to know a valid account name for the computer. To do this, start the Local Security Policy tool from the Administrative Tools menu or type secpol.msc at an elevated command prompt. Then, under Local Policies\Security Options, double-click Interactive Logon: Do Not Display Last User Name. Click Enabled, and then click OK.

You can configure whether the Welcome screen is used through the Always Use Classic Logon setting in Group Policy. For this, you have the following options:

-Enable the policy to use the Logon screen rather than the Welcome screen.
-Disable the policy to use the Welcome screen.
-Use Not Configured to use the default configuration (the Welcome screen).

In a domain environment, you can use Active Directory-based Group Policy to apply the security configuration you want to a particular set of computers. You can also configure this setting on a per-computer basis by using local security policy. To configure a homegroup or workgroup computer to use the Logon screen rather than the Welcome screen, use the Group Policy Object Editor, which is an MMC snap-in. You can add this snap-in to an empty console and configure a computer to use the Logon screen by following these steps:

1. Click Start, type gpedit.msc, and then press Enter. This opens the Local Group Policy Editor with the top-level Local Group Policy object open for editing.
2. In the editor, expand Local Computer Policy, Computer Configuration, Administrative Templates, System, Logon.
3. Double-click Always Use Classic Logon.
4. Select Enabled, and then click OK.

In a domain, by default users are required to press Ctrl+Alt+Del to access the Log On To Windows dialog box. You can eliminate this requirement, but it is a poor security practice. To do so, in the Local Security Policy tool, expand Local Policies\Security Options, and then double-click Interactive Logon: Do Not Require Ctrl+Alt+Del. Click Enabled, and then click OK. But, we do not advise disabling this option.

From the Microsoft Press book Windows 7 Administrator’s Pocket Consultant by William R. Stanek.

credit: technet.microsoft.com


 
Share this topic...
In a forum
(BBCode)
In a site/blog
(HTML)


Related Topics

  Subject / Started by Replies Last post
19 Replies
8966 Views
Last post March 08, 2009, 12:55:57 PM
by IT
0 Replies
2065 Views
Last post December 29, 2010, 07:59:49 PM
by Nick
0 Replies
2422 Views
Last post December 29, 2010, 08:01:16 PM
by Nick
0 Replies
3986 Views
Last post February 01, 2011, 03:25:28 PM
by Nick
0 Replies
1846 Views
Last post April 01, 2012, 12:20:22 PM
by Nick
0 Replies
1883 Views
Last post April 29, 2012, 03:06:59 PM
by Nick
0 Replies
3523 Views
Last post July 22, 2012, 10:37:38 AM
by Nick
0 Replies
1325 Views
Last post March 07, 2014, 12:30:27 PM
by Nick
0 Replies
1506 Views
Last post September 17, 2014, 10:13:45 PM
by hoolfo885
0 Replies
7909 Views
Last post March 15, 2021, 05:05:33 PM
by Nick