23

The Windows 10 "anniversary update" is coming out tomorrow and according to some reports the group policy to disable the lock screen is no longer effective on anything below the Enterprise edition. I'd like to know what options/workarounds are left to disable this nonsense on Pro editions.

Regards.

magicandre1981
  • 99,606
André Borie
  • 1,002

2 Answers2

11

For Anniversary Update Builds

There is a workaround to disable the Lock Screen in Anniversary Update builds, in any edition of Windows.

Create a Scheduled Task that runs the following command-line, or a batch/script that runs the following command:

reg.exe add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\SessionData /t REG_DWORD /v AllowLockScreen /d 0 /f

The idea is to reset the AllowLockScreen value data to 0 on these two trigger events:

  • Log on
  • Workstation unlock.

So you need to use multiple triggers for that task.

(or)

Download the Task XML from here: How to Disable the Lock Screen in Windows 10 Anniversary Update (1607)?

And use the Import Task option in Scheduler to create/import the task automatically.

Lock the workstation and unlock it. From the 2nd time onwards you shouldn't see the lock screen.

For Pre-Anniversary Update Builds

Start Regedit.exe and go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows

Create a subkey named Personalization

Select Personalization and in the right-pane, create a REG_DWORD value named NoLockScreen and set its value data to 1.

Exit the Registry Editor.

This registry edit corresponds to the following GPO.

Computer Configuration > Administrative Templates > Control Panel > Personalization > Do not display the lock screen

w32sh
  • 12,379
0

EDIT: Below method didn't really work well for me in the end (the "boot case" still shows the lock screen), but I'll leave it here for the record and in case someone has some idea how to improve it.

An alternative method (not needing a Scheduled Task) seems to be:

  1. Start/Windows menu → type secpol.msc then press Enter;
  2. In tree pane on the left, select Software Restriction Policies (node 6 of 9 total) → Additional Rules;
    • if you don't see it, select menu Action → New Software Restriction Policies to create it.
  3. Right-click on the right pane (with "Name", "Security Level", etc) → New Path Rule, then:
    • In Path, paste: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy
    • Make sure that Security Level is set to Disallowed;
    • Click Ok.

Source: ghacks.net

akavel
  • 828