Windows Thread, Grey out/hide "Log on to:" domain selection (login screen) in Technical; On our Windows XP computers, we have an option to "Log on to:" our domain or "this computer". We would ...
27th April 2010, 04:14 PM #1
- Rep Power
Grey out/hide "Log on to:" domain selection (login screen)
On our Windows XP computers, we have an option to "Log on to:" our domain or "this computer". We would like to grey out this option or hide it from the user (greying out or hiding the options button will do the same thing).
Any help appreciated.
IDG Tech News
27th April 2010, 10:36 PM #2
Pretty sure you can't do this without editing the GINA (and you really don't want to do that)
27th April 2010, 10:38 PM #3
There was something on here in the past, a regedit if i remember correctly, telling you how to do it, but I cannot find it.....
27th April 2010, 11:00 PM #4
I think the Gina is pretty much just the images and stuff. I seem to think i played with this at work about a year ago - ill see if i still have the stuff i used - although i never deployed it.
Originally Posted by srochford
but personally i like the customised msgina
28th April 2010, 12:56 AM #5
if you grey it out, what if you need to logon locally. Say if it wont communicate on the network.
28th April 2010, 10:02 AM #6
- Rep Power
glennda, thanks I'm interested in hearing more.
> if you grey it out, what if you need to logon locally. Say if it wont communicate on the network.
That's not really a concern for us, we want no local users to be used. Either credentials will be cached or if we don't go down that route, we are happy to reinstall XP if necessary; it's fully automated. If the network card is toast we can test that with a Live CD.
28th April 2010, 05:55 PM #7
I'm sorry i think it was something I must have played with at my last place and not here - doesn't seem to be anywhere i normally save stuff! I never actually implemented it here (or there!) so it might just be i have deleted it
28th April 2010, 10:30 PM #8
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
create a DWORD called NoDomainUI and set it to 1.
Be aware though, once the NoDomainUI value is set Windows will always assume logon to the local computer.
You must enter user@domain or domain\user to log on to the domain.
Another option is to set a DWORD called ShowLogonOptions in
and set the value to 1.
This hides the Domain box and the Log on using dial-up connection options, but users can still
show them by clicking the options button.
The AltDefaultDomainName and DefaultDomainName registry keys will still work and users
do NOT need to use user@domain or domain\user if a default domain is set.
Last edited by rvdmast; 28th April 2010 at 10:47 PM.
28th April 2010, 10:47 PM #9
It must be doable as in RM CC3 they've totally re-designed the logon window and you cannot select from Local or Domain. When there's no active connection only administrators can logon, other users can't.
To be honest I don't consider it a major problem as users cannot logon as anything but a local administrator, so they have to guess the password. I do grey out the 'Log on using dial-up connection':
Windows Registry Editor Version 5.00
29th April 2010, 10:59 AM #10
- Rep Power
> The AltDefaultDomainName and DefaultDomainName registry keys will still work and users
> do NOT need to use user@domain or domain\user if a default domain is set
Thanks, I have tried this but when using "NoDomainUI", the DefaultDomainName gets removed. Even if I re-enter it, it disappears when I log out.
29th April 2010, 11:51 AM #11
I've not used RM CC3 but I suspect they've just replaced the standard MSGina (the bit that handles accepting credentials). If you're a C programmer this isn't difficult to do but if you get it wrong then you won't be able to log on at all so it's something to be careful with!
Originally Posted by Michael
I'd guess it causes a problem because you get malicious users (in a school? Surely not!!) who change the login to the local machine and then the next user can't log in because they're not using the domain and they don't understand what they have to do. It's not a big deal but it can be a real irritation.
29th April 2010, 09:50 PM #12
@ramsay: do not use NoDomainUI (option 1 ) if you use the ShowLogonOptions method (option 2)
Use either one or the other.
If you use the ShowLogonOptions method the AltDefaultDomainName and DefaultDomainName registry keys will still work.
30th April 2010, 10:10 AM #13
- Rep Power
> Use either one or the other.
I'll have to consider another option then as NoDomainUI requires users to enter username@domain which is not ideal; my users can't cope with change, and ShowLogonOptions only collapses the options; it does not hide or grey them out.
I wonder if it is possible to remove the option log on to "(this computer)", leaving only the domain in the list, or ideally, grey this option out.
4th May 2010, 11:22 AM #14
- Rep Power
I have successfully edited the msgina.dll file to hide the items I do not want. Would this be legal to implement?
4th May 2010, 12:50 PM #15
Probably not, as you've changed their code without permission. We once considered changing the GINA to show our school crest instead of the XP logo, but found out deploying it would breach the EULA.
Originally Posted by ramsay
By ninjabeaver in forum How do you do....it?
Last Post: 15th October 2011, 03:40 AM
By zag in forum MIS Systems
Last Post: 16th January 2011, 04:15 PM
By albertwt in forum Windows
Last Post: 29th March 2010, 02:01 PM
By dhicks in forum MIS Systems
Last Post: 20th June 2008, 03:34 PM
By BatchFile in forum Hardware
Last Post: 25th January 2008, 10:45 AM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)