Windows 8 and 8.1 Forums


Sign in - Show All Users or Last User in Windows 8

  1. #10


    Posts : 165
    Windows 8


    Quote Originally Posted by Rusty View Post
    changing the registry value in the initial steps is causing an issue with UAC, such that I cannot then run anything as an administrator from a standard user account.
    I can confirm this problem. Easy way to check: With standard user account run an admin command prompt. Also others report this problem.

    The problem is not the denied rights for user "system". The problem is the value itself. Check: If the value of "UserSwitch" is "0" then a standard user account can run "regedit" with admin rights and change the value to "1". After this change a standard user can't run any program with admin rights.

    But we know:
    • The value "1" is only needed whilst booting - to show "all user" login screen
    • If the user "system" has the rights to change the value he will change this value back to "0".
    • I explored that the user "system" do this change immediately after or whilst the login.

    So we can do:
    • Whilst shutdown we set the value to "1" - so it's ready for next boot to show "all user" login screen
    • Immediately after or whilst the login the user "system" changes the value back to "0" - so there is no conflict with admin rights of standard user.

    For "Windows 8 Pro" this can be done with "group policy editor":
    • Start "gpedit.msc"
    • Go to "Computer Configuration" -> "Windows Settings" -> "Scripts (Startup/Shutdown)" -> "Shutdown"
    • "Add" a new shutdown script:
      Script name:
      C:\Windows\System32\reg.exe
      Script Parameters:
      ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserSwitch" /v Enabled /t REG_DWORD /d 0x00000001 /f

    "Windows 8" doesn't have the "group policy editor" and I haven't found a stable solution.

    I copied the shutdown script policy registry parts from "Windows 8 Pro" to "Windows 8" - but they have no effect.

    I also tried to find a solution with "Task Scheduler" but don't found a stable trigger for "shutdown". I tried: Begin the task = "On an event", Log = "System", Source = "User32", EventID = "1074". This was me shown in "Event Viewer" for a shutdown event. This works sometimes - but "seldom". I also tested the trigger: Begin the task = "On disconnect from user session". But also this works sometimes - but "seldom".

    As "Action" I choose:
    Program/scripts:
    C:\Windows\System32\reg.exe
    Arguments (optional):
    ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserSwitch" /v Enabled /t REG_DWORD /d 0x00000001 /f

    Perhaps somebody can work on this to find a stable solution for "Windows 8".

    I also play around a little with permissions of "UserSwitch" and add the users "Batch" and "Everyone" and give them full access - but also don't work stable.

      My System SpecsSystem Spec

  2. #11


    Posts : 22,581
    64-bit Windows 10


    Hello NiFu,

    The method used in the tutorial is rock solid other than the side affect of standard users not being able to allow entering an administrator's password if prompted by UAC.

    If you don't mind that, then it's a good solution for now. Luckily the side affect may even benefit those that do not want standard users to be able to do that anyway for better security. Like preventing the kids from doing stuff they shouldn't be.

    So far, I haven't found away around the side affect and still have all users in the sign in screen.
      My System SpecsSystem Spec

  3. #12


    Posts : 165
    Windows 8


    I read a comment in an other blog:
    and it will break the remote desktop connection credentials to do remote desktop connections
    I can't verify this - I have no remote desktop connection.
      My System SpecsSystem Spec

  4. #13


    Posts : 22,581
    64-bit Windows 10


    I haven't heard that before, but if it's from within a standard user account, then it would be part of the same UAC side affect.

    Do you have a link to where this is posted?
      My System SpecsSystem Spec

  5. #14


    Posts : 165
    Windows 8


    Quote Originally Posted by Brink View Post
    Do you have a link to where this is posted?
    See here - comment of guest "Me" on December 10, 2012 at 2:37.

    The other mentioned problem in this blog ("also the windows store would not let me log in no matter what I did") has other reasons - see end of comments (guest "Sergey Tkachenko" on December 13, 2012 at 8:29).

    Quote Originally Posted by Brink View Post
    the side affect of standard users not being able to allow entering an administrator's password if prompted by UAC.
    Hm, when I don't want that standard users can enter administrator's password - then I don't give them the administrator's password ...
      My System SpecsSystem Spec

  6. #15


    Posts : 22,581
    64-bit Windows 10


    I tested it, and it does indeed break RDC credentials as well while set to show all users.

    For the standard account issue, it's really only an issue for those that use a standard account for everyday use instead of their administrator account, and want to perform an elevated action while still signed in to their standard account. Otherwise, most folks would want a standard user to know or be able to use the administrator's password anyways.
      My System SpecsSystem Spec

  7. #16


    Posts : 165
    Windows 8


    Quote Originally Posted by Brink View Post
    it's really only an issue for those that use a standard account for everyday use instead of their administrator account
    Yes, but if you have more than one account - and only then you want to show the all user login screen - then the other user accounts are most standard accounts. Think of a family PC where "father" is the administrator and mother, son and daughter have standard accounts.
      My System SpecsSystem Spec

  8. #17


    Posts : 22,581
    64-bit Windows 10


    Yes, it would be an issue anytime you wanted enter an administrator's password in a UAC prompt in a standard user account.

    In that case, you would have to use the default "show last user" option, and have all accounts password protected to not have them signed into automatically.

    To bad MS doesn't have an option to have "all users" show at sign in by default without the UAC credential issues.
      My System SpecsSystem Spec

  9. #18


    Posts : 1
    Windows 8 Pro


    Quote Originally Posted by NiFu View Post
    Quote Originally Posted by Rusty View Post
    changing the registry value in the initial steps is causing an issue with UAC, such that I cannot then run anything as an administrator from a standard user account.
    I can confirm this problem. Easy way to check: With standard user account run an admin command prompt. Also others report this problem.

    The problem is not the denied rights for user "system". The problem is the value itself. Check: If the value of "UserSwitch" is "0" then a standard user account can run "regedit" with admin rights and change the value to "1". After this change a standard user can't run any program with admin rights.

    But we know:
    • The value "1" is only needed whilst booting - to show "all user" login screen
    • If the user "system" has the rights to change the value he will change this value back to "0".
    • I explored that the user "system" do this change immediately after or whilst the login.

    So we can do:
    • Whilst shutdown we set the value to "1" - so it's ready for next boot to show "all user" login screen
    • Immediately after or whilst the login the user "system" changes the value back to "0" - so there is no conflict with admin rights of standard user.

    For "Windows 8 Pro" this can be done with "group policy editor":
    • Start "gpedit.msc"
    • Go to "Computer Configuration" -> "Windows Settings" -> "Scripts (Startup/Shutdown)" -> "Shutdown"
    • "Add" a new shutdown script:
      Script name:
      C:\Windows\System32\reg.exe
      Script Parameters:
      ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserSwitch" /v Enabled /t REG_DWORD /d 0x00000001 /f

    "Windows 8" doesn't have the "group policy editor" and I haven't found a stable solution.
    NiFu,

    Many thanks for that information. I have Win8 Pro so I only needed to add the shutdown script as you described. It does what I want: Multiple user logon screen but standard user (i.e. my own personal account) can enter Admin password to run updates, when necessary. I prefer not to use an Admin account for general use - I only log on as Admin when I have to.


    Brink,

    Any chance you could add the above instructions for Win8 Pro users to the Tutorial? I read the whole thread but I got the wrong idea that I had to run the VB script and then follow NiFu's instructions for 'Pro users. Once I understood, I had to do a System Restore and then follow NiFu's instructions, only.

    Many thanks to both of you.

    P.S. I now have Win8 Pro almost the way I want it:
    No lock screen, multi-user logon screen (+ passwords), no Metro interface, straight to Windows Classic Desktop with old school Start Menu and Control Panel. Call me old-fashioned but I know what I like and I like what I know!
      My System SpecsSystem Spec

  10. #19


    Posts : 22,581
    64-bit Windows 10


    Hello Abe Lincoln, and welcome to Eight Forums.

    I have updated the tutorial to add the new OPTION ONE for this that does not have the elevated credentials issue that OPTION TWO and OPTION THREE has.
      My System SpecsSystem Spec

Page 2 of 13 FirstFirst 123412 ... LastLast
Sign in - Show All Users or Last User in Windows 8
Related Threads
How to Require Users to Sign in with User Name and Password in Windows 8 and 8.1 This tutorial will show you how to require users to enter both a user name and password to sign in to Windows 8 instead of the last user displaying. You must be signed in as an administrator to be able to do...
How to Hide or Show "Sign out" in Windows 8 and 8.1 This tutorial will show you how to hide or show the Sign out option on the Start screen, Alt+F4 Shut Down Windows dialog, and Win+X Power Users menu for all or specific users in Windows 8 and 8.1. You must be signed in as an administrator...
Trying to lock down a tablet running Win 8.1 It's set to auto log in so I don't want the user to be able to sign out. Any ideas how to disable or remove it? THanks Chris
How to Enable or Disable Biometrics Sign-in for Domain Users in Windows 8.1 Starting in Windows 8.1 and Windows RT 8.1, a fingerprint registration application in PC settings is now included, thereby removing the need for a hardware manufacturer to provide such an application. Local users...
How to Enable or Disable Biometrics Sign-in for Users in Windows 8.1 Starting in Windows 8.1 and Windows RT 8.1, a fingerprint registration application in PC settings is now included, thereby removing the need for a hardware manufacturer to provide such an application. Local users...
How to show all machine’s users on the log-off (sign out) mode? I’m wondering if there is a way to show all machine’s users at log-off mode (attached) in one go. Thank you Best Jamal
How to Enable or Disable PIN Sign-in for Domain Users in Windows 8 and 8.1 Windows 8 comes with a feature that allows you to sign-in with a 4 digit PIN to your local account or Microsoft account. However, domain users have this feature disabled by default, and cannot sign-in to Windows 8 with a...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook