1

For security reasons I would like to check if the current Windows user has a password set for his account and if this password is requested when Windows starts up (meaning that the auto login with saved password is deactivated).

Is there one or more registry keys that I can query for this purpose?

I would like to use this check as a pre-setup check in the installation routine of a software developed by me. I am aware that this is not a great protection measure. It is only about fulfilling a requirement that any user authentication is enabled.

Improve this question
3
  • 1
    Unfortunately I do not have write access to Group Policy. I only need this check as a pre-setup check, so that the software I developed is only installed in a "safe" environment and at least basic protection is available.
    – André
    May 28, 2020 at 12:27
  • I hope you understand that a device that is configured to automatically log into a default user isn't necessarily insecure.
    – Ramhound
    May 28, 2020 at 12:37
  • Very bad idea for software to dictate how the user should use his computer.
    – harrymc
    May 28, 2020 at 13:22

1 Answer 1

Reset to default
1

In a domain environment, the values below in the following key would accomplish auto login:

HKLM\software\microsoft\windows nt\currenversion\winlogon\

  • AutoAdminLogon = 1
  • DefaultUserName = (username)
  • DefaultDomainName = (domain)
  • DefaultPassword = (password)

I suppose you only need to check AutoAdminLogon to make sure it's set to 0 (off) rather than 1 (on).

Edit: if you're worried about users not following security protocols for the environment in which you're developing production software for, and you don't have access to GPO's and such to enforce it yourself, you may want to have a chat with your sys/network admins for further reassurance

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .