require users to logon to network 2

[williamsba]

i am trying to find a way to REQUIRE users to logon to the domain using 95 or 98, and not allowing them to cancel out of the logon like the default. Is there a way to do this?? Thanks Brad Williams
Webmaster
2d Force Service Support Group
United States Marine Corps

 

[mot98]

Hi Brad,

This can be done by editing the registry on the Win9X boxes.


HKEY_LOCAL_MACHINE\Network\Logon

There should be a key called MustBeValidated , you will need to change the value to 1

If for some reason there is no entry for this, then just create one with that value.

Once this is done, if anyone attempt to cancel out of the logon, they will be told they must be validated before gaining access to the desktop.

Hope this helps...
mot98..

"Where's the beer?"

 

[devastator]

From Microsoft Technet and a previous post

Find the following string and make these changes;

Registry Settings
System Key: [HKEY_LOCAL_MACHINE\Network\Logon
Value Name: MustBeValidated
Data Type: Reg_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

Basically create a new DWORD value, or modify the existing value called "MustBeValidated" and set it to equal "1" to reguire successful authentication.

Restart Windows for the change to take effect.

Note: The Workstation must be a member of a Windows domain for this setting to be effective.

Disclaimer: Modifying the regestry can cause problems that may require you to reinstall your operating system.

 

[williamsba]

Awesome!! You just got me 2 days off of work for figuring that out! I cant thank you enough! Now I just gotta figure out how to distribute it over the network so that all machines running 95 or 98 automatically edits their registery to include that code. Thanks alot! If you have any suggestions let me know, thanks

Brad Brad Williams
Webmaster
2d Force Service Support Group
United States Marine Corps

 

[Klick]

Okay, here's a trick: Use the regedit to modify/create the value. Then select Registry|Export Registry File... to export the key ...\Network\Logon to a *.reg file. Then modify the file and delete all of the values except for the required value (MustBeValidated) - you can use NotePad or WordPad to edit this file. Save the file. When you double click the file the default action for Win98 is to merge a *.reg file into the registry (Unless your security setting have this feature turned off). Now you have a means to Start|Run a *.reg file and add the key to the registry. Use your logon script to run this at next logon.

HTH
Kevin

 

[williamsba]

Thats great. Now is there anyway to check to see if the user is running NT or 2000 before it does this registry entry? I know when I ran this file on my computer (WIN2000) it just says error: cannot access registery, so basically if the file is ran on a NT or 2000 machine it just wont display the error message, or wont even run it. Brad Williams
Webmaster
2d Force Service Support Group
United States Marine Corps

 

[Klick]

The Registry editor returns the "error: cannot access registry" because you do not have permission, not because it's Win2K.

 

[williamsba]

I created the .reg file and it works great. Is there anyway to disable that popup that asks if you want to install it into the registry. Basically so it just installs into the directory with no popups at all. Thanks Brad Williams
Webmaster
2d Force Service Support Group
United States Marine Corps

 

[smitee]

Use (S)ilent switch...

Windows Mode
REGEDIT /S filename1.reg

Command Line Example
regedit /s C:\working\RegTweaks\RunatLogOff.reg smitee

 

[williamsba]

I made a .reg file that updates the registry with this value. Is there anyway I can incorporate the Silent switch into the .reg file without having to run it from the run menu? Thanks Brad Williams
Webmaster
2d Force Service Support Group
United States Marine Corps

 

[williamsba]

P.S. This is what my .reg file looks like

REGEDIT4

[HKEY_LOCAL_MACHINE\Network\Logon]
"MustBeValidated"="1"

[HKEY_LOCAL_MACHINE\Network\Logon\New Key #1]
Brad Williams
Webmaster
2d Force Service Support Group
United States Marine Corps

 

[smitee]

Brad rather than post a batch file you could include in user's startup script or paraphrase info why don't you take a leisurely look at this link. I believe its what you want.

Force Users to Logon to Windows

http://www.winguides.com/registry/display.php/629/

Good Luck smitee

 

[Masterpjz9]

I think there is a way to do this with system policies for windows 98.

 

[sublemon]

IF you set the must be validated key, what will happen if the user tries to login to the box when it is disconnected from the network? I want to force users to login if they are connected but not if they are not connected to the network (i.e. laptop users) - any way to do this? Or only give them a DHCP address if they actually authenticate (no ip address if the press cancel on the win 95/98 login) - nay way?

thanks

gabe

 

[Guest_imported]

I wanted to do some config changes within the registry.
But I can't find it....That's right....Went under the main
drive under windows and nothing. I even did a search for
"regedit" and nothing came up. All the regedit help files
show up but no regedit. Then I thought that maybe
I need to unhide all the files within the drive. Still nothing.....
Any ideas? I know....very simple problem.....but at this time
I can't solve it.....

Thanks,

Niko

 

[mot98]

Niko,

From the Start Menu Click on Run and type in regedit

Hope this helps... mot98..

"Where's the beer?"

 

[Guest_imported]

I wanted to do some config changes within the registry.
But I can't find it....That's right....Went under the main
drive under windows and nothing. I even did a search for
"regedit" and nothing came up. All the regedit help files
show up but no regedit. Then I thought that maybe
I need to unhide all the files within the drive. Still nothing.....
Any ideas? I know....very simple problem.....but at this time
I can't solve it.....

Thanks,

Niko

 

[hanz]

Can I use the MustBeValidated registry entry to force logon to a standalone Win98 PC? If so, what would be the domain?