Skip to main content
On devices running Windows 10 1903+, Automatic Restart Sign-On (ARSO) is a feature that allows a user to sign in automatically after a system restart, especially after installing updates. Windows temporarily stores the user’s credentials in Credential Manager and uses them to restore the session. However, to maintain security, even though the session is restored automatically, the device remains locked and requires the user to unlock it with their PIN, password, or biometric authentication. ARSO can cause sessions to appear in the sessions view as if they were established, when in fact no user is actually working on the device. To prevent this, you can disable this feature.

​
Disable ARSO configuration on a device

To disable ARSO:
  1. GPO Computer Configuration → Administrative Templates → Windows Components → Windows sign in Options
  2. Registry edit HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableAutomaticRestartSignOn = 1 (DWORD)
  3. Microsoft Intune policy
    • Platform: Windows 10 and later
    • Profile type: Administrative Templates
    • Path: \Windows Components\Windows Logon Options
More information: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/component-updates/winlogon-automatic-restart-sign-on—arso-#policy-1