Hide the last logon in Windows
Posted in Geeky by Dan at 11:07 am
This post was published 2 years 11 months 24 days ago which may make its actuality or expire date not be valid anymore. This site is not responsible for any misunderstanding.I admin quite a few servers with some being Windows, and the most ANNOYING “feature” is how Windows 2000 remembers the last login on the box. Can anybody say security risk? Here is an excellent tip on how to disable that annoyance.
- Open the Administrative Tools folder in the Control Panel and then open the Local Security Policy object.
- Expand the Local Policies/Security Options branch. Double-click the setting Do Not Display Last User Name In Logon Screen.
- Click Enabled, then click OK and close the Local Security Settings console. The change will take effect at the next logon.
Now why couln’t that have been enabled by default?
I think it’s like this, because most pc’s out there are dedicated to single user, and key in your user name every time you want to log on is silly and troublesome. “Security risk” hardly happens within a protected company network, and even less so in home conditions. As for servers…how many people use other than “Administrator” account to access server anyway? Yes there are those who do, but even so they hardly will enable this “feature” which is IMHO more a nuisance than a real security improvement. I do manage couple of networks myself, and I strictly rejected such security “improvements” when demanded by parental company, as it is nothing more than waste of users time. The users who work in the same office will tell each other their passwords anyway as they need to subs. each other during leave etc. So this has the only practical use in case you really need to keep your login strictly secured, and your machine might be accessed by unauthorized person. That’s why it is off by default, and you can turn it on if you really have reason to do so.
DRS: I always rename the administrator account and use a password-like username. That makes it a bit harder for intruders to bruteforce their way in. So Yes, I always use the admin account – but not by the default username.