Default Sign-in Option in Windows 10 (client-wide)

Question

Hello Community

How can I set the sign-in option: Password: {60B78E88-EAD8-445C-9CFD-0B87F74EA6CD} as default via registry for all users of a Windows 10/11 client?

I know the following way to do this for individual users: https://www.technine.be/?p=3831. Unfortunately, this is not enough, as this must be set automatically via script and must be set for the entire client.

Answer 1

Would setting a Group Policy help with this scenario instead of a script?

Policy Location: Computer Configuration\Administrative Templates\System\Logon

Policy: Assign a default credential providor

Policy Description:

This policy setting allows the administrator to assign a specified credential provider as the default credential provider.

If you enable this policy setting, the specified credential provider is selected on other user tile.

If you disable or do not configure this policy setting, the system picks the default credential provider on other user tile.

Note: A list of registered credential providers and their GUIDs can be found in the registry at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers.

Answer 2

Hey @shanewalsh1985

Thank you for your quick reply.

Until recently I did not know that Intune (Endpoint Manager) also has the GPOs of servers. I have now created a policy and will test it and give you feedback.

Thanks for your support

Answer 3

Hello DominikMeier

Unfortunately this setting needs to be applied to the SID of each user LogonUI profile, and can't be set as default for "any" user.

---

--If the reply is helpful, please Upvote and Accept as answer--