The 'Interactive logon: Display user information when the session is locked.' setting should be configured correctly.
[User display name, domain and user names/User display name only/Do not display user information]
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Interactive logon: Display user information when the session is locked.
oval:org.secpod.oval:def:14639
SCAP Repo OVAL Definition
2013-08-13