[1909, ou] When Locking Computer - Display "Username" instead of FirstName LastName

[2097]

Hi as title , am i missing something or does windows 10 only display the full First and Last name when logging in and locking the machine ?

 

I would like it just to display the username of the account.

 

Any one done this via GP/regedit or modifying a dll.mui

[foofighterjim]

Ours shows the display name of the account.

[CHiLL]

I haven't looked at this in a very long time, but our issue was that staff didn't like having their first names displayed. So we changed the first name field to just show their first initial. So in emails or a lock screen, it will show something like 'J Smith'. It's been like that for several years now and we've had no complaints.

[2097]

I haven't looked at this in a very long time, but our issue was that staff didn't like having their first names displayed. So we changed the first name field to just show their first initial. So in emails or a lock screen, it will show something like 'J Smith'. It's been like that for several years now and we've had no complaints.

 

I assume you changed all the staff members first name field in AD to their first initial.

 

Which is fine i assume , but i cant see why there isnt a way to adjust this by modifying one of the dll's ( like in the above post about "Other User" and changing that ).

[Koldov]

Doesn't it just use the 'Display Name' field from the user's properties in AD (presuming you fill this in of course)?

 

We have users such as John Smith with a 'display name' of Mr. Smith and that is what appears for us if you hover over the user icon in the start menu and on the lock screen.

 

[themightymrp]

^ This. It just uses the display name. I changed all of our staff accounts to just appear as initial dot surname, example A. Smith

 

Didn't even bother with Mr/Mrs/Miss as it would take too long to get them all right.

[MartinT]

Format the Display Name as you wish it to be seen, then it'll just work.

[chazzy2501]

yes, display name for staff is mr or mrs surname...

 

works well.

 

This shows up in the GAL of outlook as well as the LDAP query of the printers using AD for email addresses.

Edited February 28, 2020 by chazzy2501

[Arthur]

I can't see why there isn't a way to adjust this by modifying one of the dll's (like in the above post about "Other User" and changing that).

It's also possible through Group Policy (without changing the display name in AD or modifying any Windows files).

 

[2097]

It's also possible through Group Policy (without changing the display name in AD or modifying any Windows files).

 

 

 

 

What does that give them ? I assume it just says some one is logged in without saying a name ?

[Arthur]

What does that give them? I assume it just says someone is logged in without saying a name?

This is what it looks like with the two policies set from my screenshot above.

 

 

The 'Explain' tab contains more details on what the highlighted policy does.

 

Interactive logon: Display user information when the session is locked

 

This setting controls whether details such as email address or domain\username appear with the username on the sign-in screen. For clients that run Windows 10 version 1511 and 1507 (RTM), this setting works similarly to previous versions of Windows. Due to a new Privacy setting in Windows 10 version 1607, this setting affects those clients differently.

 

Changes in Windows 10 version 1607

Beginning with version 1607, new functionality was added to Windows 10 to hide username details such as email address by default, with the ability to change the default to show the details. This functionality is controlled by a new Privacy setting in Settings > Accounts > Sign-in options. The Privacy setting is off by default, which hides the details.

This Group Policy setting controls the same functionality.

 

This setting has these possible values:

 

• User display name, domain and user names: For a local logon, the user's full name is displayed. If the user signed in using a Microsoft Account, the user's email address is displayed. For a domain logon, the domain\username is displayed.
  
• User display name only: The full name of the user who locked the session is displayed.
  
• Domain and user names only: For a domain logon only, the domain\username is displayed. The privacy setting in Settings > Accounts > Sign-in options is automatically on and grayed out.
  
• Do not display user information: No names are displayed, but for all versions of Windows before Windows 10, the full names of users will be displayed on the Switch user desktop. Beginning with Windows 10 version 1607, this option is not supported. If this option is chosen, the full name of the user who locked the session is displayed instead. This change makes this setting consistent with the functionality of the new Privacy setting. To have no user information displayed, enable the Group Policy setting Interactive logon: Don't display last signed-in.
  
• Blank: Default setting. This translates to "Not defined" but it will display the user's full name in the same manner as the option User display name only.
  

Hotfix for Windows 10 version 1607

Clients that run Windows 10 version 1607 will not show details on the sign-in screen even if the User display name, domain and user names option is chosen because the Privacy setting is off. If the Privacy setting is turned on, details will show.

The Privacy setting cannot be changed for clients in bulk. Instead, apply KB 4013429 to clients that run Windows 10 version 1607 so they behave similarly to previous versions of Windows.

 

Interaction with Block user from showing account details on sign-in

For all versions of Windows 10, only the user display name is shown by default.

If Block user from showing account details on sign-in is set, then only the user display name is shown regardless of any other Group Policy settings. Users will not be able to show details.

If Block user from showing account details on sign-in is not set, then you can set Interactive logon: Display user information when the session is locked to User display name, domain and user names to show additional details such as domain\username. In this case, clients that run Windows 10 version 1607 need KB 4013429 applied. Users will not be able to hide additional details.

 

Best practices

Your implementation of this policy depends on your security requirements for displayed logon information. If you run computers that store sensitive data, with monitors displayed in unsecured locations, or if you have computers with sensitive data that are remotely accessed, revealing logged on user's full names or domain account names might contradict your overall security policy.

 

Depending on your security policy, you might want to enable the Interactive logon: Don't display last signed-in policy.

[2097]

umm

 

This seems to be missing for me in Group Policy , which i assume is what i want ?

 

Domain and user names only: For a domain logon only, the domain\username is displayed. The privacy setting in Settings > Accounts > Sign-in options is automatically on and grayed out.

[2097]

umm

 

This seems to be missing for me in Group Policy , which i assume is what i want ?

 

Domain and user names only: For a domain logon only, the domain\username is displayed. The privacy setting in Settings > Accounts > Sign-in options is automatically on and grayed out.

 

But ! seems to be available on the local machine , Weird how the GP's on the server haven't been updated .. They are on server 2019

 

Gonna do it via registry key instead .. Will update this thread with the corresponding registry entry

Edited March 2, 2020 by 2097

[2097]

Ok here is the registry key to set the lock screen to display the username instead of the "display name"

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\

 

 

DontDisplayLockedUserId

 

REG_DWORD

 

Value = 4

 

Its present in 1909 group policys , my machine is still on 1703 and it isnt located on there or on my 2019 servers .

 

Thanks to Arthur for the info above that helped me find it.