10

Can anyone please tell me how to hide admin account from the welcome screen without disabling it?

The method that uses the SpecialAccounts registry key does disable the account, so you can no longer enter the admin password to run elevated tasks from a limited account.

The solution should be usable by Home editions of Windows, so if it requires a group-policy, please also include the registry entry that the group-policy editor alters.

5
  • 2
    This is an important question because if we are expected to use limited accounts for day-to-day activity instead of an admin account, then we need an easy way to elevate now and then without having to jump through hoops by logging into a separate account. That is exactly what the UAC dialogs are for. But to get that to work, we have to enable the default admin account and give it a password. However this also adds the admin account to the login screen which is usually undesirable. :-|
    – Synetech
    Mar 26, 2014 at 21:37
  • 1
    @Synetech Another way to hide/show accounts: superuser.com/questions/423054/… Actually this one could be used as base for many different ways to control login screen contents even while example shows how to do it through accessibility options. Only limit here is creativity. Mar 26, 2014 at 21:54
  • 1
    @SampoSarrala, good tip thanks. Unfortunately I probably won’t want to use it for my mother’s system because I want to keep her system pure (no system modifications). Sadly, her system is exactly the one I want to protect by having her use a limited account, but not have an admin account cluttering up the login screen. This is precisely the problem: there’s no way to protect novice users that is clean, safe, easy, and convenient. :-(
    – Synetech
    Mar 26, 2014 at 21:59
  • 1
    the "option 1" solved it: sevenforums.com/tutorials/…
    – JinSnow
    Feb 27, 2017 at 8:02
  • The method that uses the SpecialAccounts registry key does NOT disable the account. It is only hidden as you told it to. This is very different. Now actually an answer to your question (for anyone who reaches this question by search): how to hide admin account while still using it in UAC superuser.com/a/182382
    – zypA13510
    Jul 19, 2017 at 16:42

3 Answers 3

9

In the Registry, you can create a list of accounts to hide at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList. Create a REG_DWORD value named Administrator, with 0 as data to hide it (any other value will have no effect).

4
  • 5
    That does disable the account.
    – Synetech
    Mar 26, 2014 at 19:20
  • @Synetech: Has that changed since XP, and do other values (e.g. 0xFFFF) do the same?
    – user1686
    Mar 26, 2014 at 19:42
  • I read something last night that led me to believe that perhaps it didn’t disable it in Vista (I’ll try to find the page), but it most certainly does in 7. I tested it today and as soon as I added the admin account to it, the password field (and [Yes] button) of the UAC dialog became disabled. Removing (or renaming) the registry entry re-enabled the ability to enter a password in the UAC dialog. As for values, it looks like the mere existence of the value is enough to disable an account; the actual value is irrelevant. :-(
    – Synetech
    Mar 26, 2014 at 21:34
  • I just tested it - it didn't disable the account. I tried "Run as different user" using Administrator account and it worked. Jul 27, 2017 at 23:08
1
  1. Start->Run->secpol.msc
  2. Navigate to Local policies -> Security settings
  3. Find the entry "Interactive Logon: Hide last user..." and set it to activated.
  4. Reboot the machine
3
  • 4
    I think this only applies to professional and ultimate? if so might be worth mentioning in answer
    – James
    Jul 1, 2013 at 8:02
  • how about windows basic Jul 1, 2013 at 8:27
  • 2
    Without this setting Windows will display the last successfully logged on user in the login dialog. With this setting enabled Windows will not display the name of the last user that successfully logged on. The setting is not related to the welcome screen nor to hiding the admin account. Jul 1, 2013 at 9:39
1

You can't "hide" it like what you're implying. You can however, require username and password to log on that way no one knows what accounts are on the computer. Effectively "hiding" the account.

Windows 7: Log On with User Name and Password

1
  • 1
    why we can't hide the admin account....from welcome screen without disabling it Jul 1, 2013 at 8:25

Not the answer you're looking for? Browse other questions tagged or ask your own question.