GCPW - Policy to remove all previous logged in accounts from the log in screen.

[TwistedHelixis]

While testing GCPW, I have noticed that all previous accounts that have logged in are displayed down the left side of the login screen.

 

I have deployed the following policy, but it doesn't seem to be removing the accounts.

./Device/Vendor/MSFT/Policy/Config/LocalPoliciesSecurityOptions/InteractiveLogon_DoNotDisplayLastSignedInData type: IntegerValue = 1

 

Any ideas

[paulkerton]

We have./Device/Vendor/MSFT/Policy/Config/LocalPoliciesSecurityOptions/InteractiveLogon_DoNotDisplayLastSignedIn = Integer Value 1

 

we also apply

./Device/Vendor/MSFT/Policy/Config/WindowsLogon/HideFastUserSwitching = Integer Value 1 (Mostly for filtering purposes)

 

and

 

./Device/Vendor/MSFT/Policy/Config/LanmanWorkstation/EnableInsecureGuestLogons = Integer Value 0

 

I don't know if all three work in concert, but they seem to apply.

We've seen the list still apply if the machine hasn't been enrolled with the correct user in the past. Also, one that's caught me out before - is the enrollment user licensed for EDU Plus/Teaching and Learning Add-On?

Edited March 11, 2025 by paulkerton

[TheHyperTechie]

I have this one enabled that @paulkerton mentioned - ./Device/Vendor/MSFT/Policy/Config/LocalPoliciesSecurityOptions/InteractiveLogon_DoNotDisplayLastSignedIn = Integer Value 1

 

Appears to do the trick

[TwistedHelixis]

So it looks like the policy I already have should work. Ill re apply the policy and see what happens.

[TwistedHelixis]

It is working now. Either typed it in wrong or didn't wait long enough for the policy to apply.

 

So, does the welcome message now appear every time a user logs in

Welcom, you admin can monitor........ Click 'I agree' to proceed

 

Before making the above policy change the message would only appear on the users first login, but now it seems to be on every login.

 

Is this correct?

Edited March 11, 2025 by TwistedHelixis

[TwistedHelixis]

Almost ready to go live and test GCPW on some staff

 

Do either of you have any User account control policies setup in GCPW, you wouldn't mind sharing?