FAT64 Posted August 31, 2005 Share Posted August 31, 2005 Does anyone know how to disable or, better still, remove the Options button from the XP/2000 logon window? Link to comment Share on other sites More sharing options...
net_user Posted August 31, 2005 Share Posted August 31, 2005 use group policy Link to comment Share on other sites More sharing options...
FAT64 Posted August 31, 2005 Author Share Posted August 31, 2005 It might be a bit more helpful as to state where in Group Policy this restriction is, because I have searched high and low with no success. Link to comment Share on other sites More sharing options...
ringfinger Posted August 31, 2005 Share Posted August 31, 2005 Are you doing this in an active directory environment in a network or on your home computer? Link to comment Share on other sites More sharing options...
FAT64 Posted August 31, 2005 Author Share Posted August 31, 2005 This will be within a Windows 2000 active directory domain. Link to comment Share on other sites More sharing options...
Stoic Joker Posted August 31, 2005 Share Posted August 31, 2005 use group policy<{POST_SNAPBACK}>That would have been my first answer also... (hehe)But as it turns out it's not actually listed in GP, but you can "add" it via Administrative Templates. Below is the contents of a .txt file that happened to be on my desktop, I've not a clue as to the source of the info...but if it's made it to my desktop to was a good enough source to be worth saving... So...I don't know of any way that you can remove a domain, why do you need to dothis?If its because users log onto the incorrect domain, then you can force adefault domain and then hide the domain list using group policy.Although there is no group policy setting to do this, I got around the problemby writing a custom ADM file which changes a couple of registry keys in:HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon.The 2 keys to change are:ShowLogonOptions - set to 0 to hide the domain list &DefaultDomainList - set this to the domain you need to logon to.Here's a copy of the ADM file:;****************************************************************;* Custom ADM file to force specific domain to logon to. You'll *;* need to also change group policy \Computer\AdminTemplates\Sy *;* stem\GroupPolicy\ Enable Registry Policy Processing, and *;* enable "process even if the group policy objects have not *;* changed" *;* Written by Gary Middleton,UK *;****************************************************************CLASS MACHINECATEGORY !!LogonPOLICY !!HideDomainListEXPLAIN !!HideDomainList_HelpKEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"VALUENAME ShowLogonOptionsVALUEON NUMERIC 0 ; removes dropdown listVALUEOFF NUMERIC 1 ; enables dropdown listEND POLICYPOLICY !!DefaultDomainEXPLAIN !!DefaultDomain_HelpKEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"VALUENAME DefaultDomainNameVALUEON "DOMAINNAME" ;where DOMAINNAME is the domain you want theusers to logon toVALUEOFF ""END POLICYEND CATEGORY[strings]Logon="Logon Options"HideDomainList="Hide Domain List"HideDomainList_Help="Enabling this settings hides the domain list from theCTRL+ALT+DELETE screen.Disabling will show the domain list."DefaultDomain="Default Domain"DefaultDomain_Help="Default domain name to set to DOMAINNAME if enabled. Itwill be the default option in the drop down list at the CTRL+ALT+DELETEscreen"Just cut & paste into wordpad, savewith a .ADM extension. Load GPMC, right click administrative Tools &add template, find location of the saved adm file.To view change view\filtering from the menu with the policy loaded,uncheck box "only show policy settings that can be fully managed"You'll then be able to edit the 2 keys in your new Admin Templatewithin the policy.Hope this helps,Gary Middleton.p.s. At least if you've already fixed this, it will show up in google groups& help someone else - I couldnt find this solution anywhere."Matt" wrote:[vbcol=seagreen]> Can you remove a domain in the "log in to" drop down list on the login page?> I have a dedicated forest root domain that I do not want viewable.> Removing from WINS only removes from the network browser.[/vbcol]How can I hide the drop-down list of domains that appears on the logon screen of Windows XP and later machines? A. To remove the domain drop-down list from the logon screen and force users to use their full user principal name (UPN), perform these steps: Start the registry editor (regedit.exe). Navigate to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon registry subkey. From the Edit menu, select New, DWORD value. Enter a name of NoDomainUI and press Enter. Double-click the new value and set it to 1. Click OK. Reboot the machine. The logon screen will no longer show a drop-down list for domains, and users will need to enter the full UPN to log on. For example, the user of an account called John in domain savilltech.com will enter the logon name john@savilltech.com. Link to comment Share on other sites More sharing options...
FAT64 Posted September 1, 2005 Author Share Posted September 1, 2005 I'll give it a bash, Stoic. Thanks. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now