No Domain Join during Setup

[Nick_Parker]

Odd question, I've just installed Win 7 Enterprise (ISO from the Volume Licensing Site) and set it up on one of our PCs as a test. At no point during the installation did it ask me to join the PC to the domain.
Once the setup was finished, it asked me to create a user, name the pc, set a password for the user and choose the network location.
I assumed it had't picked up the network as this is what XP does when it hasn't detected a network card, but no, Win 7 booted and it was connected to the network and had been assigned an IP by our DHCP?

Is this by default? Have a missed something? It just seems silly to now have the additional steps of joining it to the domain and then removing the temporary user?

[Nick_Parker]

Another thing I've just realised, is there no longer a local admin account? Because I wasn't asked to set the password for it during setup...

Sorry if these are stupid questions :P

[FN-GM]

Hi,

There is a local admin account it might be disabled. That is normal sysprep behaviour with the domain etc. It was the same in Vista. Im not an expert so im not sure if you can change it or anything.

[Nick_Parker]

OK, next question, I've manually joined it to the domain, but its still giving me the Win 7/Vista style logon, ie. not asking for username. If you want to log on as anybody else other than the domain admin (the domain account I manually added) you have to pick the "switch user" button. How can I enable the normal domain logon window?

[FN-GM]

You need to set the group policy not to remember the last logged on user. It is in system polices under a policy that beings with interactive logon.

[wagnerk]

OK, next question, I've manually joined it to the domain, but its still giving me the Win 7/Vista style logon, ie. not asking for username. If you want to log on as anybody else other than the domain admin (the domain account I manually added) you have to pick the "switch user" button. How can I enable the normal domain logon window?

To my knowledge, since Vista, MS has gotten rid of the "classic logon screen":



A few people have requested to bring it back, but nothing so far

-Ken

[wagnerk]

You need to set the group policy not to remember the last logged on user. It is in system polices under a policy that beings with interactive logon.

I believe these two are what you're refering to:

Computer config > Admin templates > System > Logon : Assign a default domain for logon

Computer config > Windows settings > Security Settings > Security options: Interactive Logon: Don't display last username

-Ken

[FN-GM]

I believe these two are what you're refering to:

Computer config > Admin templates > System > Logon : Assign a default domain for logon

Computer config > Windows settings > Security Settings > Security options: Interactive Logon: Don't display last username

-Ken

They are the ones cheers.

[Gatt]

As for the local admin account - Zac is right in that "Administrator" is disabled by default upon installation

You should have been prompted to create a user account which also creates the name of the PC (eg as you type "JBloggs" the box underneath becomes "JBloggs-PC"
This account becomes an Administrator account, but not THE Administrator Account

Unless you use an unattended XML file (ie after Sysprep via WDS/MDT/SCM) , then domain joins are manual as of Vista... Why, I have no idea...

[Gatt]

Another thing to watch (this is true for Vista/7/2008/R2) is that if you type "Administrator" into the username field on login it will DEFAULT to the local account..
Same applies with any other username that is both a local acconut and a domain account..

Very annoying as each time I must prefix it with DOMAIN\ or use the UPN suffix (@dnsdomain.com)

[SYNACK]

Computer config > Admin templates > System > Logon : Assign a default domain for logon

Another thing to watch (this is true for Vista/7/2008/R2) is that if you type "Administrator" into the username field on login it will DEFAULT to the local account..
Same applies with any other username that is both a local acconut and a domain account..

Very annoying as each time I must prefix it with DOMAIN\ or use the UPN suffix (@dnsdomain.com)

Just set the default logon domain in GP as above and it solves this problem, works for us on Vista so will be the same with 7.

[Gatt]

Tried that - works for all other accounts but not when the same account name exists in AD and on the local machine...

[SYNACK]

Tried that - works for all other accounts but not when the same account name exists in AD and on the local machine...

Must be a 7 thing as I am sure that works with Vista.

[Gatt]

Unfortunately, it happened with Vista as well - even with Default Domain GPO set

[AngryTechnician]

Yet another good reason to rename the domain and/or local Administrator account in my opinion.