How to disable Last Logon Name in Windows 2000,XP&2003

If you're new here, you may want to subscribe to our RSS feed. Thanks for visiting!

One of the least looked at security feature in Windows is the last login name. When you login on your Windows PC (either standalone or a Domain attached PC), it can display the last logged in user. This can be a security issue especially in a domain attached environment.

This can be disabled from the Local Security Policy snap-in or from Windows Registry.

To disable displaying the Las Logon ID in Windows from the Local Security Policy:

1. Click Start - Control Panel - Administrative Tools.

2. Open the Local Security Policy object.

3. Expand Local Policies - Security in the left pane.

4. Double-click the “Interactive Logon: Do not display last user name”

5. Select Enabled, Click Apply & OK

6. Close the Local Security Policy Editor

 

Restart the computer and you should no more see the Last logged in username.

To do this from the Windows Registry,

1. Click Start - Run, type “regedit”

2. Navigate to

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

HKEY_LOCAL_MACHINE
    \Software
       \Microsoft
          \Windows
             \CurrentVersion
                \Policies
                   \System
                  

3. In the right-pane, look for the key “DontDisplayLastUserName” and set it to “1″

4. Close Windows Registry Editor and restart Windows.

Last Logged in user name would have now disappeared.