Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In the list of users (under Local Users and Groups in my Windows 7) I have an ASPNET user (its description says "Account used for running the ASP.NET worker process (aspnet_wp.exe)" and its full name is "ASP.NET Machine Account")

The thing is this user does not appear in Windows login screen. What I have found:

  • It is not a "Built-in security pricipal" user
  • It belongs only to Users group
  • I don't have HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts key in my registry

In every sense I can see that it is a normal user yet it does not appear in login screen. Now the questions are:

What does make it special?

How can I create a user like this?

share|improve this question

migrated from Jun 8 '12 at 5:29

This question came from our site for system and network administrators.

up vote 1 down vote accepted

The most likely reason is that it has the "Deny log on locally" user right.

Run gpedit.msc and go to Computer Configuration: Windows Settings: Security Settings: Local Policies: User Rights Assignment and find the "Deny log on locally" setting. By default this contains the Guest account; I think in your case you will find it also contains the ASPNET account.

You can add additional accounts to this list by double-clicking on "Deny log on locally" and selecting "Add User or Group".

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .