Removing admin account from windows 10 login screen

[JohnOne]

How can I remove the only admin account in system from login screen, while still being able to do admin tasks with it's password from non admin account?

So I only want it not to be able to be logged into from the login screen, but not disabled.

[JLogan3o13]

Are you looking to make it impossible for someone to log in with the account altogether, or just hide it from the login screen? If the latter, there is a group policy that can do this (if not on Win10 Home):

• Computer Configuration/Windows Settings/Security Settings/Local Policies/Security Options
  • Interactive logon: Do not display last user name

[JohnOne]

That is the best solution yet, cheers. The windows version is home single language so no gpedit, but got it done from registry.

Just a shame that user has to type name as well as password. But I believe it to be only option, at least my searchings have turned up nothing else.

Thanks again JLogan3o13

[BrewManNH]

Here's how I did it on the computers I deployed for our stores.

Open Regedit, and navigate to “HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList”
    a. Right click “ProfileList” and select New -> Key, and then hit enter to accept the default value of “New Key #1”.     This is needed so that the Welcome screen doesn’t show all of the accounts that are set up in Windows and only        shows the last logged in user.

 

[jguinch]

Hi J1, here is the way I use :

http://www.laxdal.org/node/44

 

[JLogan3o13]

But if, as J1 states in the OP, he want to run apps with the Administrator's credentials, that hack is not going to work as it buggers the UAC.

[JohnOne]

1 hour ago, BrewManNH said:

Here's how I did it on the computers I deployed for our stores.

Open Regedit, and navigate to “HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList”
    a. Right click “ProfileList” and select New -> Key, and then hit enter to accept the default value of “New Key #1”.     This is needed so that the Welcome screen doesn’t show all of the accounts that are set up in Windows and only        shows the last logged in user.

 

Cheers I'll have a pop at that.

1 hour ago, jguinch said:

Hi J1, here is the way I use :

http://www.laxdal.org/node/44

 

This can cause a lot of difficulty, because a standard user cannot do admin tasks, as the prompt for password has no field to enter it or a confirm button. It essentially renders the system with no usable admin account.

Cheers.

[jguinch]

Yes, with the method I gave, you cannot login with the admin account. But the account is not disabled, so you can login as a standard user and use the "Run as different user" to do some admin tasks.
Now you will say : ok, but you cannot RunAs everything with this method  =>  Yes, it's right. But wait, you can keep an AutoIt compiled on the system that you launch  as standard user : this script asks for the admin password, then use it to RunAs the write in the registry for the value to unhide the local admin account from the login screen and logoff. On startup, a scheduled task (configured to run with the system account) hides the admin account from the login screen.
It's far-fetched, complicated, heavy.... for my fun !

[JohnOne]

1 hour ago, jguinch said:

Yes, with the method I gave, you cannot login with the admin account. But the account is not disabled, so you can login as a standard user and use the "Run as different user" to do some admin tasks.
Now you will say : ok, but you cannot RunAs everything with this method  =>  Yes, it's right. But wait, you can keep an AutoIt compiled on the system that you launch  as standard user : this script asks for the admin password, then use it to RunAs the write in the registry for the value to unhide the local admin account from the login screen and logoff. On startup, a scheduled task (configured to run with the system account) hides the admin account from the login screen.
It's far-fetched, complicated, heavy.... for my fun !

Indeed, far to much messing around.

[JLogan3o13]

2 hours ago, jguinch said:

Yes, with the method I gave, you cannot login with the admin account. But the account is not disabled, so you can login as a standard user and use the "Run as different user" to do some admin tasks.
Now you will say : ok, but you cannot RunAs everything with this method  =>  Yes, it's right. But wait, you can keep an AutoIt compiled on the system that you launch  as standard user : this script asks for the admin password, then use it to RunAs the write in the registry for the value to unhide the local admin account from the login screen and logoff. On startup, a scheduled task (configured to run with the system account) hides the admin account from the login screen.
It's far-fetched, complicated, heavy.... for my fun !

And the award goes to...

[jguinch]

Exactly the expression I wanted to say !

[am632]

There is a command you can run in command prompt to turn off a user account without removing it, I dont know if it will be what you are looking for but you may want to check it out, just run the following.

 

net user administrator /active:no

 

you can replace 'administrator' with any user account name as well, and toggle no/yes

[JLogan3o13]

@am632 that command disables the account, which is nowhere near what the OP is asking to do.

[GogoTraining]

On startup, a scheduled task (configured to run with the system account) hides the admin account from the login screen.