Norphy Posted March 17, 2006 Posted March 17, 2006 You know when you lock a Windows PC, it says "This PC has been locked, only $username$ ($User's Real Name$) or an administrator can unlock this PC"? Is there a way to either stop it displaying $User's Real Name$ or at the very least stop it showing their first names? I really don't want to have to go through every bloody teacher account and remove their forenames if I possibly avoid it. Cheers, Norphy
MrDylan Posted March 17, 2006 Posted March 17, 2006 The name it shows is the Display Name from within Active Directory.
webman Posted March 17, 2006 Posted March 17, 2006 It involves hacking msgina.dll and replacing it on each workstation. Pretty sure you're not "allowed" to do but technically possible: Using "Resource Hacker" (Google), open up %windir%\system32\msgina.dll. Navigate to "String Table\101\1033". Number 1610 in the right pane should be the one you're referring to. Try removing the "(%s)" in the string and format it how you like. Make backups, do it at your own risk, myself or my empoyer is not responsible for anything breaking as a result of this, yadda yadda yadda.... 8)
apeo Posted March 17, 2006 Posted March 17, 2006 Dunno of anyway to stop it from displaying the name but you could just run a script to change the name or use admodify.
webman Posted March 17, 2006 Posted March 17, 2006 @apeo: Can't be too careful when modifying DLLs you know .. been there, done that, got the error msgs
Norphy Posted March 17, 2006 Author Posted March 17, 2006 Thanks guys Guess I'll have to write a script then.
Geoff Posted March 17, 2006 Posted March 17, 2006 @apeo: Can't be too careful when modifying DLLs you know .. been there, done that, got the error msgs Against the terms of the MS EULA. Will cause your licenses to explode.
Geoff Posted March 17, 2006 Posted March 17, 2006 @apeo: Can't be too careful when modifying DLLs you know .. been there, done that, got the error msgs Against the terms of the MS EULA. Will cause your licenses to explode. Additionally under the EUCD, you (and your school) are criminally liabel. An unlimited fine and up to 10 years in jail IIRC.
webman Posted March 17, 2006 Posted March 17, 2006 I wasn't referring to error msgs from MS DLLs... :oops:
plexer Posted March 17, 2006 Posted March 17, 2006 Admodify is the way to go just change all their display names to username Ben
webman Posted March 17, 2006 Posted March 17, 2006 AD modifications are looking more and more like the safest option
Gatt Posted March 17, 2006 Posted March 17, 2006 Actually found this today Look in : default domain policy Computer Settings -- Windows Settings -- Security Settings -- Local Policies -- Security Options Then sroll for Interactive Logon: Display User Information when session is locked 3 choices when enabled - Full details (default) User Display Name Only NO information
Norphy Posted March 17, 2006 Author Posted March 17, 2006 Woo! Cheers m8! Bit of a strange one though, I could only see that setting if I edited the GPO on the DC itself, it wouldn't display if edited on a workstation.
apeo Posted March 17, 2006 Posted March 17, 2006 Good one Gatt.. Well spotted, I hate searching for settings in GPO.
Norphy Posted March 17, 2006 Author Posted March 17, 2006 Upon further experimentation, it appears this setting only works on 2003 SP1 servers. It doesn't seem to want to know on the XP SP2 workstations and I know the setting is being applied as there is a new registry key present. Bugger
Gatt Posted March 17, 2006 Posted March 17, 2006 bugger - not had a chance to test on any clients - as I aint got any running again - just got the DC up today and need to rebuild my entire GP's
Gatt Posted March 20, 2006 Posted March 20, 2006 Yeaah we did - got them all back in now Have an new Domain name so had to Import them into a blank GPO!
apeo Posted March 20, 2006 Posted March 20, 2006 Oh well Norphy looks like its back to messing around with ad. @Gatt: Eeek DC rebuild, I've had to do it in the past and though it was straight forward (had all me backups), I alway feel i forgot something. Its like leaving the house and thinking did 'i turn the alarm on' or 'lock the door'.. stupid stuff like that.
Gatt Posted March 20, 2006 Posted March 20, 2006 tell me about it! I got a feeling ive lost some NETLOGON scripts
Gatt Posted March 25, 2006 Posted March 25, 2006 Anyone else managed to change this? I used Resource Hacker and changed the XP Logon on the Logon box to our Logo, and changed all references to System Administrator to ICT Supoprt. Looks good, so was just wondering if anyone else has done this?
webman Posted March 25, 2006 Posted March 25, 2006 I suggested it in this thread but Geoff pointed out a few minor reasons not to do it. edited to reflect the merged topic - tarquel
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now