Logon Options

[FAT64]

Does anyone know how to disable or, better still, remove the Options button from the XP/2000 logon window?

[net_user]

use group policy

[FAT64]

It might be a bit more helpful as to state where in Group Policy this restriction is, because I have searched high and low with no success.

[ringfinger]

Are you doing this in an active directory environment in a network or on your home computer?

[FAT64]

This will be within a Windows 2000 active directory domain.

[Stoic Joker]

use group policy

<{POST_SNAPBACK}>

That would have been my first answer also... (hehe)

But as it turns out it's not actually listed in GP, but you can "add" it via Administrative Templates.

Below is the contents of a .txt file that happened to be on my desktop, I've not a clue as to the source of the info...but if it's made it to my desktop to was a good enough source to be worth saving... So...

I don't know of any way that you can remove a domain, why do you need to do

this?

If its because users log onto the incorrect domain, then you can force a

default domain and then hide the domain list using group policy.

Although there is no group policy setting to do this, I got around the problem

by writing a custom ADM file which changes a couple of registry keys in:

HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon.

The 2 keys to change are:

ShowLogonOptions - set to 0 to hide the domain list &

DefaultDomainList - set this to the domain you need to logon to.

Here's a copy of the ADM file:

;****************************************************************

;* Custom ADM file to force specific domain to logon to. You'll *

;* need to also change group policy \Computer\AdminTemplates\Sy *

;* stem\GroupPolicy\ Enable Registry Policy Processing, and *

;* enable "process even if the group policy objects have not *

;* changed" *

;* Written by Gary Middleton,UK *

;****************************************************************

CLASS MACHINE

CATEGORY !!Logon

POLICY !!HideDomainList

EXPLAIN !!HideDomainList_Help

KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"

VALUENAME ShowLogonOptions

VALUEON NUMERIC 0 ; removes dropdown list

VALUEOFF NUMERIC 1 ; enables dropdown list

END POLICY

POLICY !!DefaultDomain

EXPLAIN !!DefaultDomain_Help

KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"

VALUENAME DefaultDomainName

VALUEON "DOMAINNAME" ;where DOMAINNAME is the domain you want the

users to logon to

VALUEOFF ""

END POLICY

END CATEGORY

[strings]Logon="Logon Options"

HideDomainList="Hide Domain List"

HideDomainList_Help="Enabling this settings hides the domain list from the

CTRL+ALT+DELETE screen.Disabling will show the domain list."

DefaultDomain="Default Domain"

DefaultDomain_Help="Default domain name to set to DOMAINNAME if enabled. It

will be the default option in the drop down list at the CTRL+ALT+DELETE

screen"

Just cut & paste into wordpad, save

with a .ADM extension. Load GPMC, right click administrative Tools &

add template, find location of the saved adm file.

To view change view\filtering from the menu with the policy loaded,

uncheck box "only show policy settings that can be fully managed"

You'll then be able to edit the 2 keys in your new Admin Template

within the policy.

Hope this helps,

Gary Middleton.

p.s. At least if you've already fixed this, it will show up in google groups

& help someone else - I couldnt find this solution anywhere.

"Matt" wrote:

[vbcol=seagreen]

> Can you remove a domain in the "log in to" drop down list on the login page?

> I have a dedicated forest root domain that I do not want viewable.

> Removing from WINS only removes from the network browser.[/vbcol]

How can I hide the drop-down list of domains that appears on the logon screen of Windows XP and later machines?

A. To remove the domain drop-down list from the logon screen and force users to use their full user principal name (UPN), perform these steps:

Start the registry editor (regedit.exe).

Navigate to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon registry subkey.

From the Edit menu, select New, DWORD value.

Enter a name of NoDomainUI and press Enter.

Double-click the new value and set it to 1. Click OK.

Reboot the machine.

The logon screen will no longer show a drop-down list for domains, and users will need to enter the full UPN to log on. For example, the user of an account called John in domain savilltech.com will enter the logon name john@savilltech.com.

[FAT64]

I'll give it a bash, Stoic. Thanks.