I need some group policy help

[Ryuson99]

I need to setup a policy to only show one domain at the login prompt using server 2003. I have come up with a way to remove the domain box completly, but then they will have to input there user name with the @ format <user@domain>. The way I set it up was locally by adding the NoDomainUI DWord with a value of 1. I need to find a way to deploy this method or find a better method as stated below.

Is there a way to block the other domains from showing up so that they only see one?

Also how do I edit a registry key with group policy?

would I need to make a run once logon script? and if so how would I go on doing that?

TIA

 

[Ryuson99]

Thanks for all the replys

 

[kermalou]

anytime.

 

[Ryuson99]

So nobody knows?

 

[eigen]

Originally posted by: Ryuson99
So nobody knows?

The might know in the right forum.

 

[KLin]

Originally posted by: Ryuson99
So nobody knows?

nobody cares. Post in the right forum.

 

[Mackie2k]

I know....$500.

🙂

Basically you cannot remove the domains that are listed there. The domains listed there are based on the trusts of the domain the machine is joined to.

But, you can use a script to set the default domain that is always listed there....

Createa script that runs REG.exe and change this registry key:

To cause the domain drop-down list to select the domain that you want, instead of the first domain in the list use the registry editor to navigate to HKLM\Software\Microsoft\Windows NT\CurrentValue\WinLogon.

Set the DefaultDomainName Value Name string to the domain that you want

 

[Ryuson99]

Originally posted by: Mackie2k
I know....$500.

🙂

Basically you cannot remove the domains that are listed there. The domains listed there are based on the trusts of the domain the machine is joined to.

But, you can use a script to set the default domain that is always listed there....

Createa script that runs REG.exe and change this registry key:

To cause the domain drop-down list to select the domain that you want, instead of the first domain in the list use the registry editor to navigate to HKLM\Software\Microsoft\Windows NT\CurrentValue\WinLogon.

Set the DefaultDomainName Value Name string to the domain that you want

I guess I'm going to have to keep it the way I have it and letting the users login with the username@domain format.

Thanks for the help.