802.11 wireless profile: Enable Single Sign On for this network, and Perform immediately before User Logon issues.

Question

_{Monday, November 9, 2015 4:55 PM | 1 vote}

Greetings and salutations,

We are seeing issues on the Windows Logon screen when enabling the Single Sign On for this network and Perform immediately before User Logon settings in a Group Policy deployed 802.11 wireless profile. Having the ...before User Logon selected in the wireless single sign on settings in the profile, the Windows Logon Screen will show multiple user account selection options in the lower left. The choices are Other user and Local or domain account password if I remember correctly.

We do have a couple Computer policy settings that may tie in to this. In the Computer configuration settings deployed via GPO we have two settings that may play a role. Although these are not an issue on Windows 8 and older.

I would expect the logon screen to show blank User Name and Password fields like it does when pre-logon auth is disabled (Single Sign On for this network on, and Perform immediately after User Logon selected)**In previous versions of Windows that was the case.  You would hit Ctrl+Alt+Delete and be presented with the User Name and Password fields, empty.  Now you first have to choose an account in the lower left (Local or domain account password), and enter in the information. These choices shouldn't exist due to the policy setting we have set to not display last user name, at least I don't think it should.

Screen shot of 802.11 wireless profile:

One of the other issues that ties in to this is the formatting and behavior of the Logon screen when these settings are configured this way. After selecting Local or domain account password, entering the user name and password, and hitting enter or clicking the make it so arrow (->) there is no indication that any action was taken. The cursor still blinks indicating that the end user still needs to hit enter or select the arrow (->). Doing so does nothing... then suddenly without prompt it will login.*
*

Logon screen after Ctrl+Alt+Delete

After selecting Local or domain account password (which I don't think I should have to select)

Again I would like to note that after entering the user name and password, there is no indicator that you have hit enter or clicked the arrow. The cursor just blinks until it suddenly continues the logon process.

Jesse Beauclaire =============================================================

All replies (8)

_{Monday, November 16, 2015 8:18 AM ✅Answered}

Hi Jesse,

Thanks for the clarification.

Besides, try to check Windows Update for build 10586, after that, check to see if issue insists.

In the mean time, submit this through the Windows Feedback Tool.

Regards

Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected].

_{Tuesday, November 10, 2015 9:40 AM | 1 vote}

Hi Jesse,

Thank you for your feedback.

The policy do not display last user name seems that it is not good enough to work under Windows 10, as Windows 10 logon screen changes a lot. We may submit feedbacks on this aspect.

Besides, the logon behavior should be related with the services, if we would like to take a further look, we may consider to capture a logon trace:

Some reference:

http://blogs.technet.com/b/askpfeplat/archive/2012/06/09/slow-boot-slow-logon-sbsl-a-tool-called-xperf-and-links-you-need-to-read.aspx

Regards

Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected].

_{Tuesday, November 10, 2015 1:49 PM | 1 vote}

Michael,

That is my thought too; the Windows 10 logon screen does not take kindly to the legacy setting "Interactive logon: Do not display last user name". I'm surprised that this hasn't come up more, to me it's a pretty big issue.

I have added pictures to the original post that shows the logon screen. After I have installed Visual Studio 2015, and made sure that I have all Windows SDK components installed I will attempt to do a boot/logon trace. In the past I have not had much success with xperf, but I do admit that it was back in the early Windows 7 days. I will try again and post results when I have some time, hopefully today.

Thanks,

Jesse Beauclaire =============================================================

_{Thursday, November 12, 2015 3:20 AM | 1 vote}

Hi Jesse,

Thanks for the update.

By the way, how the Windows Update for Windows 10 are managed under your environemnt?

Please make sure we have most recent Windows Update installed, or consider to download it from Microsoft update catalog and then install manually:

https://catalog.update.microsoft.com/v7/site/

I can't find a similar thread talking about the same login screen issue with the policy (Do not display Last user name) enabled, which shared that Windows Update have fixed the issue for him.

Regards

Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected].

_{Thursday, November 12, 2015 6:35 PM}

Windows Updates are deployed via SCCM, and yes we have all Windows 10 updates applied.

All by itself the do not display last user name setting works just fine.  The logon screen only gets messed up when the 802.11 wireless profile is set to Perform immediately before User Logon in the Single Sign On for this network setting.

Jesse Beauclaire =============================================================

_{Monday, November 16, 2015 1:23 PM}

10240 is the current build.  I'll talk to our SCCM/WSUS guy about it.

Jesse Beauclaire =============================================================

_{Sunday, November 22, 2015 6:53 AM}

Hi Jesse,

What is your current situation?

If any fruther help needed, please feel free to post back.

Regards

Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected].

_{Monday, November 23, 2015 12:58 PM}

Michael, it appears that the November CU fixed it! I no longer receive the User account choice, it just displays User name and Password fields.

Thanks,

Jesse Beauclaire =============================================================