---
title: Disable Windows authentication for generic accounts
slug: disable-windows-authentication-for-generic-accounts
docTags: 
createdAt: 2025-06-11T20:26:17.824Z
---



# Problem

You need a user to log in to Activate without using Windows authentication because the logged-in account is a shared or generic account.

# Solution

1. Create a system role named **Disable Logon**.
2. Add a **Members** parameter to the role, referencing a group in Active Directory that contains generic users.
3. Add the required generic accounts to this AD group.
4. Open the Activate web client — a logon prompt will appear, allowing the user to manually enter their username and password.

:::hint{type="info"}
This configuration is useful for shared or kiosk-style devices where Windows authentication is not appropriate.
:::