GPO to hide CTRL-ALT-DEL login options? 2

[Teknofowb]

Hey All,

I was just wondering if there was a GPO setting that would make the "Log on to:" option hidden by default. This is just to avoid user confusion after a migration to a new domain. It can still be expandable but I want it to be hidden initally.

Thanks in advance,

PJ

 

[acl03]

i don't see an option to collapse "log on to" portion of the logon screen by default....but maybe i missed it.

Check out the excel file linked below if you haven't seen it.

http://www.tek-tips.com/viewthread.cfm?qid=1179685&page=6

Thanks,
Andrew

 

[Teknofowb]

Thanks for the reply. It may not be possible and was just a 'nice to have' anyways.
That's a great spreadsheet. I put it on my PDA for a handy reference.

 

[monsterjta]

There is not a native GPO for this machine setting. It's a registry modification, in which you can script and add to a startup policy...hence, distributing the setting via a policy.

The registry location is:

HKLM\software\microsoft\windows nt\currentversion\winlogon

You'll need to create a new DWORD value called "NoDomain UI", and set it to a value of 1.

I hope you find this post helpful,

Jonathan Almquist
Minneapolis, MN

 

[acl03]

If you want to roll this out without logon scripts, you could create a custom .adm file and roll it out with a GPO directly. I use this method to roll out a few custom reg keys.

Keep in mind though with custom gpo entries, once you set it, changing it back to "not configured" will not get rid of it. You actually need to disable the policy and set in your custom that the disabled value should be 0.





Thanks,
Andrew