[SOLVED] How do I make a default logon Domain?

[link470]

So lets admit it. Probably a good number of us have had someone come up to us saying "I can't login" and it turns out they're trying to login to the local machine and didn't change the drop down box to your domain. What I'd like to do, is have a default domain appear in that box. I found a good article on Microsoft on how to do this:

http://www.microsoft.com/technet/abouttn/flash/tips/tips_080305_2.mspx

 

There's only one problem. The simple 8 line script they use errors out on line 8 when you try to import it as a template in a GPO. It says that it's expecting CATEGORY, and it found CATEGOR...doesn't make any sense. The two places that script says category, both say category in my script. I didn't miss a letter.

 

Anyways, if anyone has a better idea on how to do this, or have come across that error before while trying to create that GPO, please let me know! Thanks!

Edited July 11, 2008 by link470

[Guest monkeyx]

This is our adm for default domain. If you posted yours may be able to help diagnose? Is your an exact copy of MSN adm as well?

 

CATEGORY "Logon Settings" 
 KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" 
   POLICY "Default Domain" 
     PART "Default Domain" EDITTEXT 
       VALUENAME "DefaultDomainName" 
     END PART 
   END POLICY 
END CATEGORY

[somabc]

I had to add a space after CATEGORY at the end of the file to make it work.

[Michael]

I've rarely had this problem, but on the subject of the domain logon window, the more common problem I have is users ticking the "Log on using dial-up connection" box.

 

This reg file greys out the box making it impossible to tick. Very handy and logon problems have reduced considerably!

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"RasDisable"="1"

[cookie_monster]

The .adm template seems a bit random and only works when it feels like it as far as i can tell.

[link470]

I had to add a space after CATEGORY at the end of the file to make it work.

 

WOW...

 

just WOW...

 

lol. That worked perfectly. Thanks

 

I've rarely had this problem, but on the subject of the domain logon window, the more common problem I have is users ticking the "Log on using dial-up connection" box.

 

This reg file greys out the box making it impossible to tick. Very handy and logon problems have reduced considerably!

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"RasDisable"="1"

 

Excellent call on that, I like it.

[link470]

The .adm template seems a bit random and only works when it feels like it as far as i can tell.

 

From what I've seen, it can take a few seconds for the policy to load. I've tested it and hit control+alt+delete to login and it's the local machine. I try again 5 seconds later [literally] and it's set to our domain. So what I'm going to try to do is just set the GPO to wait until all policies are loaded until the login window comes up.

[srochford]

We use this subroutine in the machine startup script - replace "student" with the name of your domain.

 

It sets the default logon domain and then hides the dropdown (it will appear if you click options or you ge the password wrong)

 

it also makes the default option at shutdown change to "logoff"

 

sub SetLogonOptions
 sRegPath="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"
 o=oShell.RegWrite(sRegPath & "DefaultDomainName","STUDENT","REG_SZ")
 o=oShell.RegWrite(sRegPath & "ShowLogonOptions", "0","REG_DWORD")
 o=oShell.RegWrite(sRegPath & "LogoffSetting", "0","REG_DWORD")
end sub

[cookie_monster]

In a VB Script?

[djones]

We use this subroutine in the machine startup script - replace "student" with the name of your domain.

 

It sets the default logon domain and then hides the dropdown (it will appear if you click options or you ge the password wrong)

 

it also makes the default option at shutdown change to "logoff"

 

sub SetLogonOptions
 sRegPath="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"
 o=oShell.RegWrite(sRegPath & "DefaultDomainName","STUDENT","REG_SZ")
 o=oShell.RegWrite(sRegPath & "ShowLogonOptions", "0","REG_DWORD")
 o=oShell.RegWrite(sRegPath & "LogoffSetting", "0","REG_DWORD")
end sub

 

 

I'm trying to implement something similar to this (adding some other reg entries too) but I can't seem to work out how to add it to an existing script - I use one to install printer drivers at startup due to restricted user permissions.

 

Can anyone point me in the right direction?

 

Dave.

[ZeroHour]

Just FYI if someones advice helps you click the "thanks" button and add to there reputation and it tells other users that the solution helped you.

[djones]

Just FYI if someones advice helps you click the "thanks" button and add to there reputation and it tells other users that the solution helped you.

 

That's great and i have started to do that where appropriate but I'm still trying to work this out. Can anyone help with adding reg edits via startup and logon scripts or i suppose call .reg files from vb scripts?

 

Dave

[plock]

@djones - cmd /c regedit /s \\servershare\servername\key.reg

 

Is that what you mean?

[djones]

@djones - cmd /c regedit /s \\servershare\servername\key.reg

 

Is that what you mean?

 

Yeah, something like that. Would I need to wrap any commands around that line or could that be added, standalone, in an existing vbs login script?

 

Edit: The /s switch I assume means 'silent' but what does the /c relate to - 'computer'?

[djones]

Edit: The /s switch I assume means 'silent' but what does the /c relate to - 'computer'?

 

Ignore that last edit. The /c switch means 'create' or 'replace' registry keys. Derr.

[morganw]

Just spent a while trying to make a RasDisable adm, i'm a bit of an AD rookie but it seems work ok.

 

CATEGORY "Logon Settings"

KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"

POLICY "RasDisable"

VALUENAME "RasDisable"

VALUEON "1"

VALUEOFF "0"

END POLICY

END CATEGORY