This security setting determines whether the name of the last user to log on to the computer is displayed in the Windows logon screen. If this policy is enabled, the name of the last user to successfully log on is not displayed in the Logon Screen. . If this policy is disabled, the name of the last user to log on is displayed. Default: Disabled. Counter Measure: Configure the Interactive logon: Display user information when the session is locked setting to Do not display user information. The possible values for this policy setting are: * User display name, domain, and user names. * User display name only. * Do not display user information. Potential Impact: Users will not see their user name or domain name when unlocking their computer, they will have to enter that information. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Interactive logon: Do not display last user name (2) REG: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System!DontDisplayLastUserName