Hide trusted domains from the Windows login dialog

[spyordie007]

I'm working on a project where I've got 9 domains, 4 of them are in 3 AD forests. And 5 of the domains are NT 4 domains that support legacy applications/services.

I'm looking for a way to hide the NT 4 domains from the login dialog on clients, leaving the others.

I know I could remove the domain all together and force UPN login, but figured I would see if anyone else was aware of a way to simply hide the domains. I'd rather make this transparent to the users.

Thanks,

Erik

 

[RebateMonger]

According to this UseNet post by a Windows Server MVP, there's no way to hide a trusted Domain in the dropdown.

This more recent UseNet post, by another Windows Server (Directory Services) MVP, gives the same answer.

I see lots of folks asking that question, and can't find ANYBODY that has a viable answer. How about an easier question? :beer:

 

[sonoma1993]

just curious, how do you join a computer using like windows xp pro to more than one domain?

 

[RebateMonger]

Originally posted by: sonoma1993
just curious, how do you join a computer using like windows xp pro to more than one domain?

You can't. A PC can only join a single Domain.

But a User can have accounts on multiple Domains. The logon services will deliver the option for the User to log onto any "Trusted" Domains.

 

[spyordie007]

Originally posted by: RebateMonger
According to this UseNet post by a Windows Server MVP, there's no way to hide a trusted Domain in the dropdown.

This more recent UseNet post, by another Windows Server (Directory Services) MVP, gives the same answer.

I see lots of folks asking that question, and can't find ANYBODY that has a viable answer. How about an easier question? :beer:

Thanks, this is pretty much what I've expected and seen from my own research but figured I'd see if anyone here had tried to change this behavior.

The closest thing to a "solution" that I have is to set the NoDomainUI key (to hide the pull down altogether) than set the DefualtDomainName key and do UPN login when users are not in the same domain as the computer, which I may end up doing.

Erik