No Domain Join during Setup

[Nick_Parker]

Odd question, I've just installed Win 7 Enterprise (ISO from the Volume Licensing Site) and set it up on one of our PCs as a test. At no point during the installation did it ask me to join the PC to the domain.

Once the setup was finished, it asked me to create a user, name the pc, set a password for the user and choose the network location.

I assumed it had't picked up the network as this is what XP does when it hasn't detected a network card, but no, Win 7 booted and it was connected to the network and had been assigned an IP by our DHCP?

 

Is this by default? Have a missed something? It just seems silly to now have the additional steps of joining it to the domain and then removing the temporary user?

[Nick_Parker]

Another thing I've just realised, is there no longer a local admin account? Because I wasn't asked to set the password for it during setup...

 

Sorry if these are stupid questions

[FN-GM]

Hi,

 

There is a local admin account it might be disabled. That is normal sysprep behaviour with the domain etc. It was the same in Vista. Im not an expert so im not sure if you can change it or anything.

[Nick_Parker]

OK, next question, I've manually joined it to the domain, but its still giving me the Win 7/Vista style logon, ie. not asking for username. If you want to log on as anybody else other than the domain admin (the domain account I manually added) you have to pick the "switch user" button. How can I enable the normal domain logon window?

[FN-GM]

You need to set the group policy not to remember the last logged on user. It is in system polices under a policy that beings with interactive logon.

[Kitkatninja]

OK, next question, I've manually joined it to the domain, but its still giving me the Win 7/Vista style logon, ie. not asking for username. If you want to log on as anybody else other than the domain admin (the domain account I manually added) you have to pick the "switch user" button. How can I enable the normal domain logon window?

 

To my knowledge, since Vista, MS has gotten rid of the "classic logon screen":

 

http://hackspc.com/wp-content/uploads/2008/10/xp_logon_screen.gif

 

A few people have requested to bring it back, but nothing so far

 

-Ken

[Kitkatninja]

You need to set the group policy not to remember the last logged on user. It is in system polices under a policy that beings with interactive logon.

 

I believe these two are what you're refering to:

 

Computer config > Admin templates > System > Logon : Assign a default domain for logon

 

Computer config > Windows settings > Security Settings > Security options: Interactive Logon: Don't display last username

 

-Ken

[FN-GM]

I believe these two are what you're refering to:

 

Computer config > Admin templates > System > Logon : Assign a default domain for logon

 

Computer config > Windows settings > Security Settings > Security options: Interactive Logon: Don't display last username

 

-Ken

 

They are the ones cheers.

[Gatt]

As for the local admin account - Zac is right in that "Administrator" is disabled by default upon installation

 

You should have been prompted to create a user account which also creates the name of the PC (eg as you type "JBloggs" the box underneath becomes "JBloggs-PC"

This account becomes an Administrator account, but not THE Administrator Account

 

Unless you use an unattended XML file (ie after Sysprep via WDS/MDT/SCM) , then domain joins are manual as of Vista... Why, I have no idea...

[Gatt]

Another thing to watch (this is true for Vista/7/2008/R2) is that if you type "Administrator" into the username field on login it will DEFAULT to the local account..

Same applies with any other username that is both a local acconut and a domain account..

 

Very annoying as each time I must prefix it with DOMAIN\ or use the UPN suffix (@dnsdomain.com)

[SYNACK]

Computer config > Admin templates > System > Logon : Assign a default domain for logon

 

Another thing to watch (this is true for Vista/7/2008/R2) is that if you type "Administrator" into the username field on login it will DEFAULT to the local account..

Same applies with any other username that is both a local acconut and a domain account..

 

Very annoying as each time I must prefix it with DOMAIN\ or use the UPN suffix (@dnsdomain.com)

 

Just set the default logon domain in GP as above and it solves this problem, works for us on Vista so will be the same with 7.

[Gatt]

Tried that - works for all other accounts but not when the same account name exists in AD and on the local machine...

[SYNACK]

Tried that - works for all other accounts but not when the same account name exists in AD and on the local machine...

 

Must be a 7 thing as I am sure that works with Vista.

[Gatt]

Unfortunately, it happened with Vista as well - even with Default Domain GPO set

[AngryTechnician]

Yet another good reason to rename the domain and/or local Administrator account in my opinion.

[mac_shinobi]

not tried it yet so not sure if its the same as xp with regards to this work around but if you do the key combination below twice in a row does that change the welcome screen to a different login screen ?

 

Ctrl + Alt + Delete

 

Not sure if this is vista thing but if you scroll down half way

 

http://www.sevenforums.com/tutorials/612-secure-logon-press-ctrl-alt-delete-log.html

 

[EDITED]

Edited August 20, 2009 by mac_shinobi

[AngryTechnician]

Nope, hasn't worked since Vista.

[mac_shinobi]

Nope, hasn't worked since Vista.

 

Ammended above with link for windows 7 afaik ( correct me if im wrong )

[Nick_Parker]

In XP, to create the default profile,

 

I used to logon as a specific user, setup everything the way I wanted and then log off that user, log on as Admin, and copy the profile to Documents and Settings/Default User

 

Is this still the case with Win 7?

 

---

 

No, apparently you can't, you have to use Sysprep... LAME

Edited August 21, 2009 by Nick_Parker

[Nick_Parker]

In XP, to create the default profile,

 

I used to logon as a specific user, setup everything the way I wanted and then log off that user, log on as Admin, and copy the profile to Documents and Settings/Default User

 

Is this still the case with Win 7?

 

---

 

No, apparently you can't, you have to use Sysprep... LAME

 

OMG, talk about 1 step forward, 2 steps back...

You can't copy profiles as all it seems, without using Sysprep and Imaging... what a mission!