Ask the Expert

Standardizing logon window fields

I need to set Windows 2000 Professional computers to have a default user and domain. When I go to HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogon, the default user is always the last user to logon. As the user population I work with is not the most observant, I need their log in screen to be the same even if they were not the last person to log onto that computer.

Requires Free Membership to View

If I understand the question, you want the three fields in the logon window to be the same.

The domain name should not change unless the users log onto different domains. If this is true, you might want to train them to use their UPN name rather than specify a domain. The user can enter "" and a password.

The username can be forced to a blank with a group policy. You can do this with the Default Domain Controllers policy. (Logon policies apply to domain controllers, who then enforce them on their clients via a Privilege Access Certificate (PAC) in the Kerberos ticket-granting tickets it issues.)

1. Open the Group Policy Editor for the Default Domain Controller policy and drill down to Computer Configuration | Windows Settings | Security Settings | Local Policies | Security Options.

2. Find the Do Not Display Last User Name policy.

3. Check Define This Policy Setting and then Enable the policy.

4. At the client, either shutdown and restart or run secedit /refreshpolicy machine_policy.

This was first published in April 2001

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: