Policy
Enumerate local users on domain-joined computers
This policy setting allows local users to be enumerated on domain-joined computers. If you enable this policy setting, Logon UI will enumerate all local users on domain-joined computers. If you disable or do not configure this policy setting, the Logon UI will not enumerate local users on domain-joined computers.
PackMicrosoft Windows
CategorySystem / Logon
Policy ID
b6ed3886ec5fInternal name
EnumerateLocalUsersRegistry
Copy registry mappings
HKLM\Software\Policies\Microsoft\Windows\System\EnumerateLocalUsers (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\System\EnumerateLocalUsers (disabled) = 0Policy notes
This policy setting allows local users to be enumerated on domain-joined computers. If you enable this policy setting, Logon UI will enumerate all local users on domain-joined computers. If you disable or do not configure this policy setting, the Logon UI will not enumerate local users on domain-joined computers.
Related policies
Allow users to select when a password is required when resuming from connected standbyAlways use classic logonAlways use custom logon backgroundAlways wait for the network at computer startup and logonAssign a default credential providerAssign a default domain for logonBlock user from showing account details on sign-inDo not display network selection UIDo not display the Getting Started welcome screen at logonDo not enumerate connected users on domain-joined computersDo not process the legacy run listDo not process the run once listExclude credential providersHide entry points for Fast User SwitchingRun these programs at user logonShow clear logon backgroundShow first sign-in animationTurn off app notifications on the lock screenTurn off picture password sign-inTurn off Windows Startup sound