Windows – domain joined Windows 10 – Disable password requirement on wake up

group-policypasswordswake-upwindows 10windows-domain

I've been trying to disable Windows 10 Pro (Build 15063) from prompting for my password when my computer wakes up for a while now, and can't figure it out.

I have a few PCs joined to a Windows domain (2 x 2016 DCs) and tried setting a GPO to disable the Require a password when a computer wakes (plugged in) (and also the '' battery one) setting under Computer Configuration > Administrative Templates > System > Power Management > Sleep Settings.

The policy gets applied properly on my PCs, but whenever I put a PC to sleep, it asks for my password no matter what.

Here's the results of rsop:


Looking at the Sign-in options screen, I see the following, and cannot change it. It stays as Authentication is required when this PC wakes from sleep (in red) even if I remove all policies related to authentication (I even tried to clear all GPOs):

options

I'm kind of dumbfounded at this point and ready to call this a Windows bug. Does anyone have any clue?

Edit 1
Tried to re-format my main PC. It allowed me to pick not to require a password in the Sign-in screen before I joined the domain, as expected (and didn't require a password on wake up). As soon as I've joined my domain, I was unable to pick an option (as expected, but I was required a password on wake up).

I used dcgpofix to reset my main DC policies, and disabled all of my policies. I still couldn't select the option within the Sign-in settings screen. It did allow me to select not to require a password within Power Options, but it keeps on asking me a password.

Best Answer

I found out using gpresult that there is a setting being configured in Group Policy by domain controllers running in Windows Server 2012 or later (Computer ConfigurationWindows SettingsLocal PoliciesSecurity Options) called "Interactive Logon: Machine Inactivity Limit" that is by default set at 900 seconds/15 minutes (default by MS I guess...).

Changing this value to a 0 and disabling the require password on logon in the power management section of the Local Group Policy did the trick for me.

Now all of my Windows 10 machines are showing the following, with no more grumpy users:

Screenshot of Sign-in options

Related Question