If you lock your workstation it's still possible to paste the contents of the
clipboard buffer into the "User name" prompt. Not terribly clever for hiding
what you've been doing.
Microsoft acknowledge the problem but made no promises about fixing it.
Obvious workaround.
-- jim credland network security who can you trust? demon internet ltd