Hide admin account from (Windows 7) login screen *without disabling* it

Can anyone please tell me how to hide admin account from the welcome screen without disabling it?

The method that uses the SpecialAccounts registry key does disable the account, so you can no longer enter the admin password to run elevated tasks from a limited account.

The solution should be usable by Home editions of Windows, so if it requires a group-policy, please also include the registry entry that the group-policy editor alters.

Nidhish Krishnan

Posted 2013-07-01T07:41:37.017

Reputation: 191

the "option 1" solved it: https://www.sevenforums.com/tutorials/507-built-administrator-account-enable-disable.html

– JinSnow – 2017-02-27T08:02:08.367

The method that uses the SpecialAccounts registry key does NOT disable the account. It is only hidden as you told it to. This is very different. Now actually an answer to your question (for anyone who reaches this question by search): how to hide admin account while still using it in UAC https://superuser.com/a/182382

– zypA13510 – 2017-07-19T16:42:34.903

2This is an important question because if we are expected to use limited accounts for day-to-day activity instead of an admin account, then we need an easy way to elevate now and then without having to jump through hoops by logging into a separate account. That is exactly what the UAC dialogs are for. But to get that to work, we have to enable the default admin account and give it a password. However this also adds the admin account to the login screen which is usually undesirable. :-| – Synetech – 2014-03-26T21:37:24.937

@Synetech Another way to hide/show accounts: http://superuser.com/questions/423054/manually-enter-login-information-in-windows-7 Actually this one could be used as base for many different ways to control login screen contents even while example shows how to do it through accessibility options. Only limit here is creativity.

– Sampo Sarrala - codidact.org – 2014-03-26T21:54:10.430

1@SampoSarrala, good tip thanks. Unfortunately I probably won’t want to use it for my mother’s system because I want to keep her system pure (no system modifications). Sadly, her system is exactly the one I want to protect by having her use a limited account, but not have an admin account cluttering up the login screen. This is precisely the problem: there’s no way to protect novice users that is clean, safe, easy, and convenient. :-( – Synetech – 2014-03-26T21:59:20.037

Answers

In the Registry, you can create a list of accounts to hide at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList. Create a REG_DWORD value named Administrator, with 0 as data to hide it (any other value will have no effect).

user1686

Posted 2013-07-01T07:41:37.017

Reputation: 283 655

I just tested it - it didn't disable the account. I tried "Run as different user" using Administrator account and it worked. – Philipp Munin – 2017-07-27T23:08:01.953

4That does disable the account. – Synetech – 2014-03-26T19:20:54.877

@Synetech: Has that changed since XP, and do other values (e.g. 0xFFFF) do the same? – user1686 – 2014-03-26T19:42:13.723

I read something last night that led me to believe that perhaps it didn’t disable it in Vista (I’ll try to find the page), but it most certainly does in 7. I tested it today and as soon as I added the admin account to it, the password field (and [Yes] button) of the UAC dialog became disabled. Removing (or renaming) the registry entry re-enabled the ability to enter a password in the UAC dialog. As for values, it looks like the mere existence of the value is enough to disable an account; the actual value is irrelevant. :-( – Synetech – 2014-03-26T21:34:49.133

Start->Run->secpol.msc
Navigate to Local policies -> Security settings
Find the entry "Interactive Logon: Hide last user..." and set it to activated.
Reboot the machine

ArcherGodson

Posted 2013-07-01T07:41:37.017

Reputation: 1 387

3I think this only applies to professional and ultimate? if so might be worth mentioning in answer – James – 2013-07-01T08:02:00.027

how about windows basic – Nidhish Krishnan – 2013-07-01T08:27:41.207

2Without this setting Windows will display the last successfully logged on user in the login dialog. With this setting enabled Windows will not display the name of the last user that successfully logged on. The setting is not related to the welcome screen nor to hiding the admin account. – Werner Henze – 2013-07-01T09:39:38.173

You can't "hide" it like what you're implying. You can however, require username and password to log on that way no one knows what accounts are on the computer. Effectively "hiding" the account.

Windows 7: Log On with User Name and Password

cbabb

Posted 2013-07-01T07:41:37.017

Reputation: 137

1why we can't hide the admin account....from welcome screen without disabling it – Nidhish Krishnan – 2013-07-01T08:25:53.543