Disable log on locally

[alsolaih]

How can I disable Options button on Log On to Windows screen.

I want the default option for log on to: to be the domain name, and the user can't change it.

he just has to put his password and login to domain.

thanks

[MrJinje]

I couldn't seem to find any Group Policy that would do this, so my guess is no, you cannot do it that way. Here are a couple of alternative solutions. Use what works for you.

1) Delete all local user accounts.

2) Change local Administrator Password.

3) Place Domain\User accounts in local users group (non-admin) so they cannot create new local accounts.

3a) If Disabled, enable caching of Domain Credentials so users can log into the domain when offline.

The GUI for the login screen was in winlogon.exe, maybe someone could patch the buttons there.

The quick and dirty method would be to run a CMD or VBS logon script that logs off any local administrator accounts. (only allowing Domain logon)

Question: Does anyone remember where the last logon domain is stored in the registry ? Could pushing that setting, pre-populate the field on a newly provisioned machine, and possibly help the OP ?