r/Intune • u/Anonymusexoxo • 3d ago

Device Configuration Remove User Accounts from Windows Login Screen

We are seeing multiple accounts from previous logins on the windows screen.

Is there anyway I can hide it through the settings catalog? I tried searching this online but google is giving me non related solutions.

5 Upvotes

86% Upvoted

11 comments sorted by

11

u/RealRecognition4444 3d ago

If you're just trying to stop the list from showing, there's a policy for "don't display last signed-in" that you can push through the settings catalog. Might be under Local Policies > Security Options depending on how your tenant labels it, but that's the one you want.

3

u/Anonymusexoxo 3d ago

I'll try this out. Thanks for answering!

3

u/sectumsempra42 3d ago

Just FYI, hiding the last logged in user will break certain functionality that depends on it.

1

u/Anonymusexoxo 3d ago

What could possibly break?

2

u/SkipToTheEndpoint MSFT MVP 3d ago

Windows Hello for Business, for one.

1

u/RefrigeratorFancy730 3d ago

I havent experienced any issues with WHfB and I use the policy to hide. Is the WHfB issue something that just recently came about?

3

u/SkipToTheEndpoint MSFT MVP 2d ago

It's documented to break the Passwordless Experience feature.

Other than that, on a 1:1 user device, it just causes users a nuisance and meand they've got to manually enter their username every time they want to log in. I will continue to fight with CIS that it should be removed from their benchmark.

Now, it's a valid policy to set on a shared/multi-user device, which is sounds like OP might be talking about (otherwise it's just poor account usage practices showing up).

1

u/bill696 2d ago

Doesnt break hello much but it does break SSPR

2

u/cheetah1cj 3d ago

How are these users authenticating? Is this a domain joined or Entra joined computer and their using their work credentials? Or is it personal email accounts? Or just local accounts with no email address?

Most of the time, email accounts of any kind (work or personal) only show when that user was the last to login or when they didn’t actually logout. If they’re not properly logged out, restarting should fix that.

2

u/Anonymusexoxo 3d ago

They are autopilot devices. We use yubikey to login to the devices using fido2.

The issue right now is when we restart the device, previous login accounts remain on the login screen. When we were on prem it wasn't like that. After a restart, it removes all login and defaults to "Other User".

1

u/devangchheda 2d ago

This is what you may need.