How to Hide "Switch user" for specific AD account login via User GPO or User registry setting

Nor Azrul Abd Malik 0 Reputation points
2026-06-03T02:15:57.0333333+00:00

I know that Switch user can be hide via Machine group policy or Machine registry setting.

since we don't want to touch the machine policy.

is it possible to be done for a specific 1 AD account only via user group policy or user registry setting?

Windows for business | Windows Client for IT Pros | Directory services | User logon and profiles
0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-06-03T02:16:06.38+00:00

    Hiding Switch user is only supported as a computer‑level (device) policy, not as a per‑user policy.

    From the available policies:

    • Hide entry points for Fast User Switching (which hides Switch user in the sign‑in screen, Start menu, and Task Manager) is exposed as:
      • MDM CSP: ./Device/Vendor/MSFT/Policy/Config/WindowsLogon/HideFastUserSwitching with values 0 (disabled/visible) or 1 (enabled/hidden).
      • Group Policy: Computer Configuration > Administrative Templates > System > Logon > Hide entry points for Fast User Switching.
      • Registry (computer scope): HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\HideFastUserSwitching.

    This setting is explicitly device‑scoped (Computer Configuration / Device CSP). There is no corresponding User Configuration GPO or user‑scope CSP/registry setting for hiding Switch user or Fast User Switching only for one specific AD account.

    Therefore, it cannot be targeted to a single user via a user GPO or a per‑user registry value; it applies to the whole machine when enabled.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. Tan Vu 2,660 Reputation points Independent Advisor
    2026-06-03T03:28:45.7033333+00:00

    Hi Malik,

    Unfortunately, we cannot hide the "Switch User" option for just one specific AD account using User-level policies or Registry settings. Windows strictly enforces this as a machine-wide setting.

    If you want to restrict that specific user without changing the policy for the whole machine, the easiest workaround is to block them from locking or logging off the computer. You can do this via User Configuration (applied only to that specific account):

    • Remove "Lock": Blocks them from locking the screen to switch users.
    • Remove "Logoff": Blocks them from logging out easily.

    This effectively prevents them from switching accounts.

    TV

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.