Win7 VM - AutoLogin to Domain?

[wlee]

I was wondering if there is a way to have a domain joined Windows 7 auto-login.
What I need to do is have a parallels Windows 7 VM join our domain but *NOT* ask the user for cedentials. ( The Mac is NOT and will NOT be domain joined ) What I want to do is have the user be able to initiate and run a few apps on our network, but this needs to be as spoon-fed,fat,dumb and brainless/happy as can be. I want to run the apps in "transparent desktop" mode so they look as though they are native Mac apps. Before you say it, yes, I know, I could do this with XenApp/XenDesktop, but we don't have the funds right now for Citrix. This is necessary to satisfy the "needs" ( FaceBook,FaceTime,etc. ) of one of the Royal princesses at work.

Thanks!

 

[imagoon]

How do you intend to handle access control? I believe (been awhile) you can configure auto log with kerberos credentials but that assumes that your that you have the Macs participating in something like that.

However, last I checked, you cannot do "app transparent mode" with Windows 7 as it is not actually full terminal services.

Personally I believe this to be the correct answer: "If these are your requirements, you will need this software and these applications that will cost $X." Then let the execs make the call. You don't have a budget should not equal you bust your butt to "force it." No budget means they decided it wasn't important enough to fund.

 

[wlee]

The Windows 7 "box" will simply be a Virtual Machine running on the non domain joined iMac Host . The Mac "NEEDS" wh0reh0use privs, the VM does NOT and will NOT get such privs.
Parallels ( and VMWare Fusion ) supports a "seamless" desktop mode that looks like TS Transparent App. BTW, we *DO* have Server2k8R2 Remote Desktop Licensing, it just doesn't work with the Mac M$ RDP client.Though you can do full desktop with it,this particular user HATES the lack of GUI "smoothness" ( Snapiness and AeroGlass ) of a TS session. My solution is pretty much a "peace offering" so I'm not ORDERED to make this user a Domain Admin AND bypass the WatchGuard UTM policies. I can lock the VM, and hence domain resources up tighter than a... < your imagination here > as long as the Mac desktop has total freedom.

 

[Beer4Me]

Hello,
I don't think what you are asking in the OP is possible because 1) it would defeat the purpose of AD/Domain functionality, and 2) there are better ways to do this.

- If the user is truly as "dumb" as you say she is, then you could just set up local machine policies with a script or manually one time deal.
- Leave the VM off of the domain, and set her up as a Guest account on the Windows VM.
- You can autologin (no password) with a local machine (not domain joined). Just set her up with an AD account (email her the credentials) and map network drives as necessary on her desktop.

 

[drebo]

To do auto-logon on Windows 7 Professional, go to a Run box (not the stupid search box on the start menu) and type "control userpasswords2". Uncheck the checkbox that says "Users must enter a user name and password...blah blah blah". It will prompt you for the auto-login credentials, of which you can specify a domain user.

 

[Beer4Me]

To do auto-logon on Windows 7 Professional, go to a Run box (not the stupid search box on the start menu) and type "control userpasswords2". Uncheck the checkbox that says "Users must enter a user name and password...blah blah blah". It will prompt you for the auto-login credentials, of which you can specify a domain user.

This doesn't work when a machine is joined to a domain. I just checked on my Win 7 lappy. Can you provide screen shots of what you're seeing/talking about? What you're talking about only disabled the need to use CTRL ALT DEL to begin the logon process. You still need a p/w.

 

[err]

you'll need a registry hack in order to do this.
I have done this before with xp machines in common area in our office so that it auto logins automatically without prompting for password. Works like a charm.

1. Click Start, click Run, type regedit, and then click OK. In Windows Vista, simply type regedit in Start Search and hit Enter.
2.

Navigate to the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
3.

Double-click the DefaultUserName entry, type the user name to log on with, and then click OK.

If DefaultUserName registry value name is not found, create the new String Value (REG_SZ) with value name as DefaultUserName.
4.

Double-click the DefaultPassword entry, type the password for the user account under the value data box, and then click OK.

If there is no DefaultPassword value, create a new String Value subkey (REG_SZ) with DefaultPassword as the value name.

Note that if no DefaultPassword string is specified, Windows automatically changes the value of the AutoAdminLogon registry key from 1 (true) to 0 (false) to turn off the AutoAdminLogon feature.
5.

In Windows Vista, DefaultDomainName has to be specified as well, else Windows will prompt of invalid user name with user name displayed as .\username. To do so, double click on DefaultDomainName, and specify the domain name of the user account. If it&#8217;s local user, specify local host name.

If the DefaultDomainName does not exist, create a new String Value (REG_SZ) registry key with value name as DefaultDomainName.
6.

Double-click the AutoAdminLogon entry, type 1 in the Value Data box, and then click OK.

If there is no AutoAdminLogon entry, create a new String Value entry (REG_SZ) with AutoAdminLogon as the value name.
7. If exist, delete the AutoLogonCount key.
8. Quit Registry Editor.
9. Click Start, click Restart, and then click OK.

 

[ksudheer123]

Hi,
Thanks lot.. this has really helped me. I was looking for AutoLogin / AutoLogon on Windows as part of automation scripts.. really helps to set the registry values.
Sudheer

 

[SecurityTheatre]

make this user a Domain Admin AND bypass the WatchGuard UTM policies

Am I reading this right? Were you being sarcastic?

Please don't tell me you're giving them domain admin. :-D

This is a bit like locking the front door, but then installing an unlocked sliding door at a user's desk after they find the key too challenging to use.