diff --git a/lubuntu/modules/users.conf b/lubuntu/modules/users.conf
index 1c79f74..9fc9b10 100644
--- a/lubuntu/modules/users.conf
+++ b/lubuntu/modules/users.conf
@@ -17,4 +17,6 @@ passwordRequirements:
     maxLength: 0
 # Explicitly set the shell instead of deferring to Calamares. We have a platform
 # expectation derived from Ubuntu here.
-userShell: /bin/bash
+user:
+  shell: /bin/bash
+  forbidden_names: [ root ]