Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In the list of users (under Local Users and Groups in my Windows 7) I have an ASPNET user (its description says "Account used for running the ASP.NET worker process (aspnet_wp.exe)" and its full name is "ASP.NET Machine Account")

The thing is this user does not appear in Windows login screen. What I have found:

  • It is not a "Built-in security pricipal" user
  • It belongs only to Users group
  • I don't have HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts key in my registry

In every sense I can see that it is a normal user yet it does not appear in login screen. Now the questions are:

What does make it special?

How can I create a user like this?

share|improve this question

migrated from Jun 8 '12 at 5:29

This question came from our site for system and network administrators.

up vote 1 down vote accepted

The most likely reason is that it has the "Deny log on locally" user right.

Run gpedit.msc and go to Computer Configuration: Windows Settings: Security Settings: Local Policies: User Rights Assignment and find the "Deny log on locally" setting. By default this contains the Guest account; I think in your case you will find it also contains the ASPNET account.

You can add additional accounts to this list by double-clicking on "Deny log on locally" and selecting "Add User or Group".

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.