Restricting Domian Name change in Logon Screen (WNT)

[vinodg]

Hello,

I dont want users to toggle to the enumurated trusted domain list in the NT Logon screen. I just want them to logon to the native domain to which the machine belongs to. Any why of doing this? Thanks in advance.

[Paul S]

Hi,

I would modify the domain cache in the registry.

HKLM\software\microsoft\windows nt\current version\winlogon\domain cache.

Hope this helps...

<font color=green>Paul</font color=green>

<font color=blue>mailto:paul@winguides.com (paul@winguides.com)</font color=blue>

[vinodg]

Hi Paul,

Thanks for your response. I tried this but did not help. I cleared the domain names from Domain Cache as mentioned by you and also set the permissions to winlogon key to Read only. This looks to be okay immediately after rebooting the server. But after some time, the logon screen is again listing the trusted domains. Am I missing some steps in doing the above? Please advise.

I forgot to say that I am using Win NT 4.0 Terminal Server Editions.

Thanks again.


<P ID="edit"><FONT class="small">Edited by vinodg on 03/11/03 06:09.</FONT></P>