GPO to force a user to log onto domain and not local machine

cwaugh · External Since: Aug 02, 2006 Posts: 1

On the windows login screen in the options button, you have the ability to
log on to the domain or the local machine. We want to force everyone to log
onto the domain and that to be the default option in the 'Log on to' field
through a group policy.

Tony Liu · External Since: Aug 02, 2006 Posts: 2

It's better to ask clients to logon with UPN looks like an email address in
a domain so that the user don't need to think about where they should log
on. I don't know if GP has an option of that. Please tell me if it has.
Thanks
"cwaugh" <cwaugh.TakeThisOut@discussions.microsoft.com> wrote in message
news:BF86011A-1A2A-4EC3-80F7-5606017AE6F9@microsoft.com...
> On the windows login screen in the options button, you have the ability to
> log on to the domain or the local machine. We want to force everyone to
> log
> onto the domain and that to be the default option in the 'Log on to' field
> through a group policy.

lforbes · External Since: Mar 16, 2006 Posts: 36

Hi,

Don't give users local user accounts and they won't be able to logon to the
local machine. Windows leaves the last option as the one showing so if the
last user logged onto the Domain than the Domain will show as the default.
The only time I have found this isn't the case is when an Admin logs on
locally or the machine is first added to the domain.

Cheers,
Lara

"cwaugh" wrote:

> On the windows login screen in the options button, you have the ability to
> log on to the domain or the local machine. We want to force everyone to log
> onto the domain and that to be the default option in the 'Log on to' field
> through a group policy.

Jerold Schulman · External Since: Dec 04, 2003 Posts: 1395

On Wed, 2 Aug 2006 09:37:02 -0700, cwaugh <cwaugh.RemoveThis@discussions.microsoft.com> wrote:

>On the windows login screen in the options button, you have the ability to
>log on to the domain or the local machine. We want to force everyone to log
>onto the domain and that to be the default option in the 'Log on to' field
>through a group policy.

Don't give them local accounts.

See tip 3031 » How do I prevent a Windows NT 4.0 users from toggling the Domain box during log on?
in the 'Tips & Tricks' at http://www.jsifaq.com

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

ivanzito · Joined: Oct 11, 2007 Posts: 1

This is the soluction:

You have to put a GPO ( logoff ) that exec this .reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"ShowLogonOptions"=dword:00000000
"DefaultUserName"=""
"AltDefaultUserName"=""
"AltDefaultDomainName"=""
"CachePrimaryDomain"=""
"DefaultDomainName"=""