Restricting Domain Login List

[Stuart_C]

I have just set up a trust between the two domains we have here however I would like to stop the computes on our accademic network having the opportunity to log into our admin domain. As windows has already addedd the domains to the "Log in to" drop down dialogue box on the log in screen is there a way to stop it?

[witch]

If they don't have a log-on for that domain, why does it matter? They can see it in the drop down, but they can't use it anyway? Or is it that you think they will choose the wrong domain?

[plexer]

You can hide the list completely but then they have to use their full upn to logon.

[Stuart_C]

If they don't have a log-on for that domain, why does it matter? They can see it in the drop down, but they can't use it anyway? Or is it that you think they will choose the wrong domain?

Choose the wrong domain/try logging in as admin staff. Generally I don't want to give them ideas, or the opportunity to try things.

[mrcrazy04]

I'm not aware of such an option, however the last server I got to play with properly was Server 2000.
Could you use a modified GINA dll to remove that drop down box (or at least disable it)?

[plexer]

You don't need to modify the gina you can do it as a reg edit or using an adm template:

How can I hide the drop-down list of domains that appears on the logon screen of Windows XP and later machines?

How can I use Group Policy to hide the domain drop down list on the Windows Logon dialog box?

Ben