March 10, 2005
Custom Login prompt: Helping users log in
One day while working in the Peter B. Lewis computer lab (a favorite hideout of mine, and an excellent lab), I noticed they had modified the login prompt of XP to include what computer image revision that computer was using. I decided to figure out how they did that so I could add instructions to the login box telling users to select the INS.CWRU.EDU domain when logging in. The results look like this:
I also set a registry entry to make INS.CWRU.EDU the default domain to log into. However, if it is changed (say to log in as your OU Administrator account into ADS), it doesn't get reset to INS.CWRU.EDU until the next reboot or until someone logs into the Kerberos Realm. If anyone knows how to permanently make this the default, I'd love to know!! But this works good enough for now..
This was accomplished using the following ADM file added to the GPMC:
;; Remember in GPMC to go View->Filtering ;; and uncheck "Only show policy settings that can be fully managed" ;; ;; David Carlin (email@example.com) 2/25/2005 ;; CLASS MACHINE CATEGORY !!Winlogon POLICY !!DefaultDomainNameBox KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon" PART !!DefaultDomainNameBox EDITTEXT DEFAULT !!DefaultDomainName_default VALUENAME "DefaultDomainName" END PART END POLICY POLICY !!WelcomeBox KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon" PART !!WelcomeBox EDITTEXT DEFAULT !!Welcome_default VALUENAME "Welcome" END PART END POLICY POLICY !!LogonPromptBox KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon" PART !!LogonPromptBox EDITTEXT DEFAULT !!LogonPrompt_default VALUENAME "LogonPrompt" END PART END POLICY END CATEGORY [strings] Welcome_default="- READ CAREFULLY - Nord Computer Lab" LogonPrompt_default="NOTICE: Use your Case Email ID and Password. You must set 'Log on to: INS.CWRU.EDU' !!!!" DefaultDomainName_default="INS.CWRU.EDU" WelcomeBox="Enter Login screen title" LogonPromptBox="Enter custom login prompt" DefaultDomainNameBox="Enter Default Domain Name" Winlogon="Configure Login Prompt & Default Domain"
Posted by djc6 at March 10, 2005 10:43 AM
TrackBack URL for this entry:
Ooo... Thanks David!
I had been looking for a quick and easy way to do this but had more pressing matters, so I moved it into the "nice to have" pile.
Thanks again for the info.
Posted by: Chuck Yoder at March 11, 2005 03:26 PM
Chuck, I wonder if you can just link your OUs to my GPO for that. It's titled "Nord Lab - Custom Logon Prompt"
Posted by: David Carlin at March 11, 2005 03:32 PM
Looks good, you could also add options for creating a legal notice (pop box when user hits ctrl-alt-del).
I'm to lazy to format the 2 sections in html so I'll just give the valuename, use the same winlogon keyname.
Posted by: Paul at June 1, 2005 09:10 AM
I would really apprecite it if you could tell/show me how to present a popup on logon.
if you could email me or something that would be great!
Posted by: tom at July 13, 2005 08:08 AM
I hate windows, but I have to administer two labs of 20 each and I must say this was exactly what I've been looking for. Thanks very much David.
Posted by: Ashley at March 19, 2006 11:56 PM
This is very interesting site
Posted by: lizbeth at July 5, 2006 10:11 PM
David-- Thank you for this useful information.
Posted by: JSibray at October 6, 2006 12:59 PM
How did you get it to say (Kerberos Realm) in brackets on the side?
Posted by: JuMz at January 31, 2008 11:58 AM