LogOn Message

[karldenton]

Hello,

I set a message to be displayed before logon (Interative Logon: Message title for users attempting to logon). The message was no longer needed to i said it back to not defined.

However, it appears on some machines only still. I have done gpupdate / force with no difference. Also doubled checked through the policys on both DC's and they are all not set.

Any ideas?

Thanks

Karl

[Geoff]

When you do GP Results, are there any errors logged? Perhaps the machines are having trouble applying policies correctly?

[karldenton]

No errors i can see - see output of result below:

 

OS Type: Microsoft Windows XP Professional

OS Configuration: Member Workstation

OS Version: 5.1.2600

Domain Name: STUDENT

Domain Type: Windows 2000

Site Name: Default-First-Site-Name

Roaming Profile:

Local Profile: C:\Documents and Settings\radmin

Connected over a slow link?: No

 

 

COMPUTER SETTINGS

------------------

CN=3IT1,OU=IT1,OU=IT Rooms,OU=Curriculum Computers,OU=All Computers,DC=student,DC=braytoncollege,DC=org,DC=uk

Last time Group Policy was applied: 25/01/2008 at 14:04:27

Group Policy was applied from: w2kserver.student.braytoncollege.org.uk

Group Policy slow link threshold: 500 kbps

 

Applied Group Policy Objects

-----------------------------

IT1 Only

IT Rooms Only

[uPD 10-04-06] Curriculum Software

All Computers [uPD 10-04-06]

Entire Domain [uPD 10-04-06]

Local Group Policy

 

The computer is a part of the following security groups:

--------------------------------------------------------

BUILTIN\Administrators

Everyone

SophosAdministrator

SophosUser

BUILTIN\Users

NT AUTHORITY\NETWORK

NT AUTHORITY\Authenticated Users

3IT1$

Domain Computers

[Geoff]

Ok, what about netdiag?

[karldenton]

When i run netdiag i get "The procedure entry point DNSGetPrimaryDomainName_UTF8 could not be located in the DLL DNSAPI.dll

[karldenton]

hold on, appears to be the wrong version of netdiag. will try again with the correct version

[ZeroHour]

Do you use RIS?

We had a RIS image that basically would never pick up policy changes. I did not make the image and it was a little hacked but nothing would ever change on the PC if we changed policy and it was actually when I changed the same setting, I discovered the issue.

Could it be a dodgy ris image?

[karldenton]

Hi,

No we use Ghost

Karl

[sahmeepee]

This looks like one of those annoying settings where there is no "disabled" option - only "not defined". Although I haven't tested it I suspect you will have to set the contents of the message text and the message title policies to be empty, but still applied (i.e. box ticked in the GPO setting).. on the client run a gpupdate /force.. then in the policy set it back to not defined and gpupdate /force the client again.

 

Some settings seemingly won't "undefine" if they have a value set.

[rvdmast]

Some GPO settings will remain if you set (enable) them first, then set them to not defined. You'll have to set it to disabled.

[sahmeepee]

Some GPO settings will remain if you set (enable) them first, then set them to not defined. You'll have to set it to disabled.

 

I'm pretty sure that setting doesn't have a "disabled" option which is the root of the problem, but the palaver I outlined is probably the next best thing.