diff --git a/ubuntustudio/modules/users.conf b/ubuntustudio/modules/users.conf
index 326ac4b..397bcce 100644
--- a/ubuntustudio/modules/users.conf
+++ b/ubuntustudio/modules/users.conf
@@ -1,21 +1,23 @@
 ---
 doAutologin: false
 setRootPassword: false
 sudoersGroup: sudo
 defaultGroups:
     - adm
     - cdrom
     - dip
     - lpadmin
     - plugdev
     - name: sambashare
       must_exist: false
       system: true
     - sudo
     - audio
 passwordRequirements:
     minLength: 0
     maxLength: 0
 # Explicitly set the shell instead of deferring to Calamares. We have a platform
 # expectation derived from Ubuntu here.
-userShell: /bin/bash
+user:
+    shell: /bin/bash
+    forbidden_names: [ root ]