How do I configure automatic login for Entra-joined Windows devices?

August 9, 2026 3 answers
Asked by MellowPine47
I'm setting up several Windows machines that are joined to a Microsoft Entra tenant and need them to sign in automatically. I've tried scripts and manually editing the Windows autologon registry values, but I'm unsure what to use for the default domain name. I've tested a period, the computer name, and "AzureAD," but none worked. The settings also disappear or revert after every reboot, even though the same approach remains in place on traditional domain-joined machines. Manual sign-in with the user account works successfully. I'm also unable to configure the Sysinternals Autologon utility because it reports that the credentials are invalid. What username and domain format should be used, and what could be causing the registry settings to be reset?

Answers

CopperLark82
For an Entra-only device, try the username in the form .\username and use the computerโ€™s local hostname as DefaultDomainName. Some setups also work with the Entra tenant value as the domain, but the important part is confirming the exact format by signing in manually first. The Microsoft 365 account must already be able to log on interactively on that machine.

MellowPine47: The account signs in manually without any problem. The confusing part is that the autologon registry values are reset after every restart.

Reply to this answer
QuietOrbit6
Make sure the device is actually cloud-only joined to Entra rather than hybrid joined. Hybrid-joined systems generally authenticate through the traditional on-premises domain, while cloud-only devices use the Entra sign-in flow. Also verify that the account and device have the required licensing and provisioning configuration, since management policies can affect sign-in behavior.
Reply to this answer
RiverMango31
If the values are present immediately after you set them but disappear after reboot, look for a device-management policy, security baseline, startup script, or provisioning process rewriting Winlogon settings. Compare the registry before shutdown and after startup, and check event logs and management-policy reports. Autologon also stores credentials in a way that security software or policy may block, so the Sysinternals tool may fail even when interactive login works.
Reply to this answer

Add your answer

Answers are reviewed before publication.

Related Discussions