Examkin

Question

Difficulty: HardWindows Security Settings and User Account Control

A systems administrator is configuring local security policies on standalone Windows 11 Pro workstations in a multi-user clinical environment. Management requires that when a workstation is locked or restarted, the sign-in screen must not display the account name or email address of the user who previously logged in. Which setting within Local Security Policy (`secpol.msc`) must the administrator enable to satisfy this requirement?

  1. Interactive logon: Don't display last signed-inAnswer
  2. B
    Interactive logon: Machine inactivity limit
  3. C
    User Account Control: Behavior of the elevation prompt for standard users
  4. D
    Credential Manager: Disallow persistence of passwords and credentials

Answer

Interactive logon: Don't display last signed-in
Enabling 'Interactive logon: Don't display last signed-in' within Local Security Policy (`secpol.msc` under Local Policies > Security Options) ensures Windows will not display the username, full name, or email address of the account that last signed in. This requires any user approaching the workstation to type both their username and password to log in.

Step-by-Step Solution

1
Identify the administrative tool needed for local security configuration.
Open Local Security Policy (`secpol.msc`).
Security policy configurations for local account display and interactive logon are managed within Local Security Policy.
2
Navigate to the Security Options policy container.
Expand Local Policies and select Security Options.
Security Options contains policies governing interactive logon behaviors and User Account Control parameters.
3
Locate and configure the target logon privacy policy.
Enable 'Interactive logon: Don't display last signed-in'.
Enabling this setting ensures that the sign-in screen remains blank until a user explicitly enters their full credentials.

Key Concept

Local Security Policy Interactive Logon Settings
Rate this question

Topics

Windows Security Settings and User Account Control

More questions from this topic