3

I'm deploying a Windows 7 upgrade using the distribution toolkit. After the install, the PC keeps attempting to auto-login as the administrator.

Is there any way to disable auto-login after the lite-touch install? Or possibly just disable it via command-line / registry entry?

2
  • 1
    You might want to keep an eye on my question: superuser.com/questions/340396/…
    – Joe Taylor
    Sep 30, 2011 at 9:00
  • MDT sets an autologin when deploying the OS, if it's not turning off the autologin at the very end, something is wrong. Answer below is just a Band-Aid, not a solution to the root cause. Check you MDT log files and determine what is causing MDT to not turn this off like it should.
    – MDT Guy
    Nov 5, 2013 at 22:21

2 Answers 2

3

Manually, Open a CMD prompt, in the CMD prompt type Control Userpasswords2 , the first checkbox you see check it. [X] Users must enter a username and password to use this computer.

registry item is:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon

Just as i figured, set to 0 and autologin is disabled, set to 1 and (this is bad) it is re-enabled fully. Tested.
why is that bad? because initialy I had put in a Password that will be used to access the the admin account automatically. By changing ONLY this one registry entry, the AutoPassword is still in the system.

Logically by using the GUI interface, the AutoPassword stored would be removed. Tested, my hunch was right, the GUI method did remove the AutoPassword, and I was unable to autologin without a password, Via just changing the registry item. I was still able to get in after Password error, by supplying the password, after the stored autopassword was removed.

With the registry change, that still leaves removing that protected storage item, the password?? Or a Psudo Admin user (or virus) could set that back to auto pretty quickly, and you should know that.

Side Notes: Also depending on the install, the admin should also be renamed, passworded , and even re-disabled if nessisary for the intended application. if the admin was re-passworded, the stored Auto password should become useless.

I do not really know enough about it, just tested theory.

2
  • Ah, that registry key will probably do. Just need to somehow make sure it's merged as the very, very final thing the install does..
    – Gaspode
    Sep 29, 2011 at 10:08
  • Creating a second admin account is a real pain in MDT and unnecessary. If you're really hell bent on securing the device, just create a step in the task sequence to rename it at the very end.
    – MDT Guy
    Jun 1, 2013 at 13:03
0

In Windows 7, if you want to avoid the autologon for only a few instances and be able to logon using another account, press or toggle between both the "shift keys" a few times just as the Windows Splash screen is loading. This will bring back the ctrl+alt+del option once the windows splash screen finishes loading.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .