It appears that the "Don't Display Last User Name" registry setting was applied in the base image used for Windows 7 Enterprise Edition 64-bit deployments. 32-bit and personal system deployment images were not affected. I do not know how this setting crept into the base configuration, and I do apologize for the inconvenience.

If you need to disable this behavior on any of the systems you support, open the Control Panel, search for "admin", select "Administrative Tools", then open the "Local Security Policy" tool. Navigate to "Local Policies, Security Options", then find the policy "Interactive logon: Do not display last user name", and set it to "disabled".

Alternatively, you can use "regedit.exe", and navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Then located the DWORD named "dontdisplaylastusername", and set it to "0", then reboot your computer.

-J. Greg Mackinnon | ETS Systems Architecture and Administration | x68251

On 4/26/2012 10:52 PM, J. Greg Mackinnon wrote:

[log in to unmask]" type="cite"> There was never any conscience decision to mask the last logged on user name for systems imaged through LiteTouch. I was not aware that this was a problem as the last few systems that I ran though LiteTouch before the last major upgrade did not have this problem. I will look into the issue as soon as I am back in the office.

Interestingly, I did get a request from a distributed IT staff member of implement this setting, but we had not made any decisions to do so (certainly I am not in love with the idea, even though it is a recommend security "best practice"). This would be the first time I know of that a Group Policy setting was implemented though force of will alone.

-J. Greg Mackinnon | ETS Systems Architecture and Administration | x68251

On 4/26/2012 11:25 AM, Travis Bartlett wrote:
[log in to unmask]" type="cite">I've also noticed this on the "Personally Owned" images.

Most users who visit the CDC don't like having to enter the Username and Password. We've had a few occasions where users had to return to the CDC for assistance, not because they forgot their password, but because they weren't sure of their username.

I understand the 'dontdisplaylastusername' use on UVM owned machines, but is it really necessary on Personally owned machines?

-Travis

On Thu, Apr 26, 2012 at 11:17 AM, Bryan Fleming <[log in to unmask]> wrote:

So I've been doing a bunch of lite touch installs over the past few weeks and one thing I've noticed is that they all have the 'dontdisplaylastusername' flag set in the registry. I've been unsetting it as my users all like/want that.

Just curious if this is a result of another change was done as an attempt at security? (which since netid's are public on the directory doesn't seem terribly effective)

I also note that even on dell hardware it's been completing with errors and warnings. Which mainly seem to be that windows update failed too many times. Perhaps related to the above flag though.

Also the flexibility of the new litetouch media is very awesome. Especially the offline version for those of use who end up with boxes who don't have a network driver by default. So thanks for that!

-Bryan