resource hacking, msgina.dll and 'lock dialog' discussion

[Norphy]

You know when you lock a Windows PC, it says "This PC has been locked, only $username$ ($User's Real Name$) or an administrator can unlock this PC"? Is there a way to either stop it displaying $User's Real Name$ or at the very least stop it showing their first names? I really don't want to have to go through every bloody teacher account and remove their forenames if I possibly avoid it.

Cheers,

Norphy

[MrDylan]

The name it shows is the Display Name from within Active Directory.

[webman]

It involves hacking msgina.dll and replacing it on each workstation. Pretty sure you're not "allowed" to do but technically possible:

Using "Resource Hacker" (Google), open up %windir%\system32\msgina.dll. Navigate to "String Table\101\1033". Number 1610 in the right pane should be the one you're referring to. Try removing the "(%s)" in the string and format it how you like.

Make backups, do it at your own risk, myself or my empoyer is not responsible for anything breaking as a result of this, yadda yadda yadda.... 8)

[apeo]

Dunno of anyway to stop it from displaying the name but you could just run a script to change the name or use admodify.

[apeo]

@webman: like the disclaimer.

[webman]

@apeo: Can't be too careful when modifying DLLs you know .. been there, done that, got the error msgs

[apeo]

Yeah i know

[Norphy]

Thanks guys

Guess I'll have to write a script then.

[Geoff]

@apeo: Can't be too careful when modifying DLLs you know .. been there, done that, got the error msgs

Against the terms of the MS EULA. Will cause your licenses to explode.

[Geoff]

@apeo: Can't be too careful when modifying DLLs you know .. been there, done that, got the error msgs

Against the terms of the MS EULA. Will cause your licenses to explode. Additionally under the EUCD, you (and your school) are criminally liabel. An unlimited fine and up to 10 years in jail IIRC.

[webman]

I wasn't referring to error msgs from MS DLLs... ops: :P

[plexer]

Admodify is the way to go just change all their display names to username

Ben

[webman]

AD modifications are looking more and more like the safest option

[Gatt]

Actually found this today

Look in :

default domain policy
Computer Settings -- Windows Settings -- Security Settings -- Local Policies -- Security Options

Then sroll for Interactive Logon: Display User Information when session is locked

3 choices when enabled -

Full details (default)
User Display Name Only
NO information

[Norphy]

Woo!

Cheers m8!

Bit of a strange one though, I could only see that setting if I edited the GPO on the DC itself, it wouldn't display if edited on a workstation.