Configure the mode of automatically signing in and locking last interactive user after a restart or cold boot

Supported OS tags: Windows10, Windows10RT

This policy setting controls the configuration under which an automatic restart and sign on and lock occurs after a restart or cold boot. If you chose “Disabled” in the “Sign-in and lock last interactive user automatically after a restart” policy, then automatic sign on will not occur and this policy does not need to be configured. If you enable this policy setting, you can choose one of the following two options: 1. “Enabled if BitLocker is on and not suspended” specifies that automatic sign on and lock will only occur if BitLocker is active and not suspended during the reboot or shutdown. Personal data can be accessed on the device’s hard drive at this time if BitLocker is not on or suspended during an update. BitLocker suspension temporarily removes protection for system components and data but may be needed in certain circumstances to successfully update boot-critical components. BitLocker is suspended during updates if: - The device doesn’t have TPM 2.0 and PCR7, or - The device doesn’t use a TPM-only protector 2. “Always Enabled” specifies that automatic sign on will happen even if BitLocker is off or suspended during reboot or shutdown. When BitLocker is not enabled, personal data is accessible on the hard drive. Automatic restart and sign on should only be run under this condition if you are confident that the configured device is in a secure physical location. If you disable or don’t configure this setting, automatic sign on will default to the “Enabled if BitLocker is on and not suspended” behavior.

No explicit registry values are set for enabled or disabled states.

• Computer
  Configure the transmission of the user's password in the content of MPR notifications sent by winlogon.

  At least Windows 10 Version 1903
• Computer
  Disable or enable software Secure Attention Sequence

  At least Windows Vista
• Computer
  Display information about previous logons during user logon

  At least Windows Vista
• User
  Remove logon hours expiration warnings

  At least Windows Vista
• Computer
  Report when logon server was not available during user logon

  At least Windows Vista
• User
  Report when logon server was not available during user logon

  At least Windows Vista
• User
  Set action to take when logon hours expire

  At least Windows Vista
• Computer
  Sign-in and lock last interactive user automatically after a restart

  At least Windows 10 Version 1903