Thanks for the suggestion @Limitless Technology but setting aside that sleep isn't involved here, I checked this setting but found it set to "When PC wakes from sleep" and greyed out, with a message at the top that "Some of these settings are hidden or managed by your organization. I found others reporting the same issue, but without reporting a useful fix.
GPResult showed that the obvious GPO setting is not being applied here: System \ Power Managment \ Sleep Settings \ Require a password when a computer wakes (plugged in)
I found advice to use powercfg to change this setting via:
powercfg /SETACVALUEINDEX SCHEME_CURRENT SUB_NONE CONSOLELOCK 0
But this gives "Group policy override settings exist for this power scheme or power setting." with no mention of what setting is controlling it. And it's not clear where this particular setting is stored, because
powercfg /query SCHEME_CURRENT SUB_NONE
has no reference to a CONSOLELOCK setting.
I used ProcMon to try to find what registry value was being read when the Sign-in settings are displayed, which turned up two that I wasn't aware of and looked promising:
- HKLM\Software\Policies\Microsoft\Windows\System\AllowDomainDelayLock: But enabling this only seemed to prevent screen blanking via the power setting, both with and without manually setting what others suggested is the delay interval HKCU\Control Panel\Desktop\DelayLockInterval
- HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DisableLockWorkstation: Enabling this does disable the lock options, but also seemed to prevent screen blanking via the power setting.
So still no fix that works here.
Thanks,
John