Share via


Disabling Winlogon Automatic Restart Sign-On

Question

Wednesday, October 30, 2019 2:04 PM

I am building a kiosk device (Win10 1803 Enterprise) using Shell Launcher to make Internet Explorer running in kiosk mode the shell. When the device restarts with IE running, a 2nd instance of IE not in kiosk mode starts when logging in again. It simply attempts to go to the home page.

I have tried to disable ARSO but it doesn't work. I have added

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableAutomaticRestartSignOn to the registry as a DWORD with a value of 1.

Still, I get that 2nd instance of IE.

If I leave the task manager running when I reboot, it too restarts at next logon.

This happens to all users who log onto the device and it doesn't matter if the shell is explorer.exe or eshell.exe.

Is there another way I should be disabling ARSO?

Skip

EDIT: the kiosk is set to autologon a service account. I am trying to prevent that 2nd instance of IE from opening.

All replies (6)

Thursday, October 31, 2019 7:31 AM

Your registry key is correct, try the GPO method.

Sign-in and lock last interactive user automatically after a restart

If you disable this policy setting, the device does not configure automatic sign in. The user's lock screen apps are not restarted after the system restarts.

/en-us/windows-server/identity/ad-ds/manage/component-updates/winlogon-automatic-restart-sign-on--arso-

Also, navigate to Computer Configuration ->Administrative Templates -> Windows Components -> Windows Logon Options

Disable Sign-in last interactive user automatically after a system-initiated restart

Regards

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Thursday, October 31, 2019 2:21 PM

Thanks.

I implemented that GPO but that didn't solve the problem.

Skip


Thursday, October 31, 2019 3:02 PM

I found articles saying to modify the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserARSO\usersid>

DWORD "OptOut" - value=1

This did not work either. 

Skip


Tuesday, November 5, 2019 7:26 AM

You may need to open a support ticket with Microsoft about your demand.

https://support.microsoft.com/en-gb/hub/4343728/support-for-business

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Wednesday, January 22, 2020 3:22 PM

Hi John,

I have the same problem. I have disabled the 'DisableAutomaticRestartSignOn' (value 1) policy but when Windows restart from a logged user the system is always trying to logon the previous logged user :(

Did you found a solution or a workarround to this Windows bug ?

JF


Wednesday, January 22, 2020 3:26 PM

No, I never found a solution. Luckily that project never went forward. We are now moving to 1909 so perhaps the behavior is different.

Skip