Quote Originally Posted by Elysia View Post
But you know, auto-login is a security risk in itself. Windows doesn't check credentials and such stuff.
I don't know the story behind it, but auto logging in is bad (which is why it's discouraged). If you're still using a discouraged feature, then you will have to deal with the world of hurt.
I'm not sure if there's a way to enforce checking via some policy, though.
it's not logging in automatically. he entered his (expired) password, and it let him in.