Policy
Do not enumerate connected users on domain-joined computers
This policy setting prevents connected users from being enumerated on domain-joined computers. If you enable this policy setting, the Logon UI will not enumerate any connected users on domain-joined computers. If you disable or do not configure this policy setting, connected users will be enumerated on domain-joined computers.
PackMicrosoft Windows
CategorySystem / Logon
Policy ID
ecc11e9217beInternal name
DontEnumerateConnectedUsersRegistry
Copy registry mappings
HKLM\Software\Policies\Microsoft\Windows\System\DontEnumerateConnectedUsers (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\System\DontEnumerateConnectedUsers (disabled) = 0Policy notes
This policy setting prevents connected users from being enumerated on domain-joined computers. If you enable this policy setting, the Logon UI will not enumerate any connected users on domain-joined computers. If you disable or do not configure this policy setting, connected users will be enumerated on domain-joined computers.
Related policies
Allow users to select when a password is required when resuming from connected standbyAlways use classic logonAlways use custom logon backgroundAlways wait for the network at computer startup and logonAssign a default credential providerAssign a default domain for logonBlock user from showing account details on sign-inDo not display network selection UIDo not display the Getting Started welcome screen at logonDo not process the legacy run listDo not process the run once listEnumerate local users on domain-joined computersExclude credential providersHide entry points for Fast User SwitchingRun these programs at user logonShow clear logon backgroundShow first sign-in animationTurn off app notifications on the lock screenTurn off picture password sign-inTurn off Windows Startup sound