Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When Fast User Switching is activated on a Windows XP machine, it returns the user to the Welcome Screen and allows logging on to a different account. Any active users have either "# of programs running" or "Logged on" displayed under their username.

Is there any way to remove or edit these messages? I know its possible to create custom Welcome Screens, but is there any less drastic measure that don't involve custom screens?

Answers involving hex-editors are welcome.

share|improve this question
Are you saying patching logonui with a hex-editor is less drastic than patching logonui with a specially designed tool to modify the Welcome Screen? – grawity Apr 2 '11 at 19:06
I want the result to be identical to the real Welcome Screen. A hex edit to remove the text underneath the username would be preferable, rather than settling for a new logonui. Besides, I am always wary of 3rd-party customization software :) – Unsigned Apr 2 '11 at 19:08
...then use the customization tools to modify the current Welcome Screen. – grawity Apr 2 '11 at 19:24
up vote 3 down vote accepted

Use software such as Stardock Logon Studio to customize the logon screen. You don't need to change it entirely – just delete the two links.

To do it manually, use a Win32 resource editor such as ResEdit or XN Resource Editor to edit resource UIFILE:1000:1033 (type UIFILE, ID 1000, lang 1033) of file %SystemRoot%\System32\logonui.exe.

The part you'll have to edit/remove is lines 939 to 940:

            <button id=atom(status0) class="status" layoutpos=none/>
            <button id=atom(status1) class="status" layoutpos=none/>

The element with id=atom(status0) displays %d unread mail messages, and id=atom(status1) is for %d programs running.

share|improve this answer
FWIW, Logon Studio might even be safer than a resource editing tool. – grawity Apr 2 '11 at 19:31
I have plenty of experience with resource editing and would rather use a familiar resource editor than a new customization tool. Good post! – Unsigned Apr 2 '11 at 19:52

Disallow SYSTEM from reading the HKCU\SessionInformation registry key.

  1. Open regedit
  2. Expand My Computer → HKEY_CURRENT_USER
  3. Right-click on the SessionInformation key, choose Permissions...
  4. In the name list, select the SYSTEM entry
  5. Under Permissions for SYSTEM, check the Deny box for Read.
  6. Click OK.


You will have to do this separately for each user's registry. Also, I am not sure if these changes will persist after logoff :(

share|improve this answer
It does not persist after logoff, but it does hide the number of running programs for the current session (although the username still displays "Logged on"). Regardless, I'm upvoting because thats a new trick I haven't heard before :) – Unsigned Apr 2 '11 at 19:02
You might be able to create a program that would change the permissions on startup. (What is the problem with showing "Logged in", anyway?) – grawity Apr 2 '11 at 19:03
Its not a "problem" per se, its a question. I just want to know if it can be done, without replacing the Welcome Screen. And yes, a script could easily be written to fix the permission. – Unsigned Apr 2 '11 at 19:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.