Show Local Users on Sign-in Screen on Domain Joined Windows 10

How to Enable Show Local Users on Sign-in Screen on Domain Joined Windows 10

By default, Windows 10 devices joined to Active Directory Domain Services (AD) do not display local user accounts on the sign-in screen. If you want to change the defaults and make local user accounts appear on the login screen, there are two methods you can use.

A Windows domain can be described as a computer network type in which a special server called 'domain controller' maintains the database with all user accounts, computer names, shared printers, permissions, and metadata. The domain controller performs authentication of users for computers joined to the domain. Computers which have joined the domain are called 'workstations' or 'domain clients'. 'Active Directory' is a special component created to help system administrators maintain domains. It is a suite of various tools that allows controlling every single aspect of a Windows domain network.

By default, local user accounts in Windows 10 are not shown on the login screen if the current PC is a domain-joined computer. Only domain accounts will appear on the sign-in screen. You may find this inconvenient. Thankfully, this behavior can be changed.

You can use either Local Group Policy Editor or a Registry tweak. The Local Group Policy Editor app is only available in Windows 10 Pro, Enterprise, or Education editions. The Registry tweak works in any edition of Windows 10.

Note: You must be signed in with an administrative account to continue.

To Enable Show Local Users on Sign-in Screen on Domain Joined Windows 10,

1. Press Win + R keys together on your keyboard, type: gpedit.msc, and press Enter.
2. Group Policy Editor will open. Go to Computer Configuration\Administrative Templates\System\Logon.
3. Double-click on the policy option Enumerate local users on domain-joined computers on the right.
4. Set it to Enabled.

You are done!

You might need to restart the computer to make changes to take effect. You can also force update the active Group Policies.

The alternative way to configure this feature is to apply a Registry tweak. Let's review it.

Enable Show Local Users on Sign-in Screen on Domain Joined PC in Registry

1. Open the Registry Editor app.
2. Go to the following Registry key.
   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
   See how to go to a Registry key with one click.
3. On the right, modify or create a new 32-Bit DWORD value EnumerateLocalUsers.
   Note: Even if you are running 64-bit Windows you must still create a 32-bit DWORD value.
4. Set its value data to 1 to enable the policy.
5. Restart Windows 10. to make the changes done by the Registry tweak take effect.

You are done. *Remove the EnumerateLocalUsers DWORD to undo the change.

The ready-to-use Registry files are available below.

Download Registry Files

That's it.