Цитата:
Джон Сэвилл
Вопрос. Как с помощью Group Policy скрыть раскрывающийся список доменов в окне Windows Logon?
Ответ. По умолчанию, когда пользователь регистрируется в системе Windows, отображается список доменов, из которых пользователь выбирает нужный для проверки своей учетной записи. Если нужно скрыть список доменов и заставить пользователя в обязательном порядке указывать домен при задании имени в поле Username, можно внести изменения в реестр; соответствующих настроек в Group Policy нет. Но если создать приведенный ниже .adm-шаблон и импортировать его в Group Policy Object (GPO), то можно добиться, чтобы список доменов при регистрации не появлялся:
CATEGORY "Logon Settings"
KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"
POLICY "Hide Domain UI"
VALUENAME "NoDomainUI"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
После импорта .adm-файла в GPO (предварительно проверьте путем отключения вида managed only policy, что данный объект групповой политики виден), активизируйте настройки, как показано на рисунке:
После обновления политики клиент при регистрации перестанет видеть раскрывающийся список доменов.
|
источник
и ещё
Цитата:
By default, when a user logs on to his or her Windows system, a list of domains is displayed from which the user can select which domain to use for account authentication. If you want to hide the list of domains and force the user to enter the domain as part of the username field, you can do so via a registry change, but no Group Policy setting exists by default. However, you can create the following .adm template file and import it to a Group Policy Object (GPO) to facilitate the suppression of the domain drop-down list:
CATEGORY "Logon Settings"
KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"
POLICY "Hide Domain UI"
VALUENAME "NoDomainUI"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
After you import the .adm file into a GPO (and ensure that it's visible by turning off the managed only policy view) enable the setting by selecting view, filtering. After the policy refreshes on the client, the domain drop-down list will no longer show on the logon page.
The default domain name is stored in the DefaultDomainName registry value, but no built-in Group Policy setting to control its value. You can easily create a custom .adm file that will let you configure the default domain for computers that have the GPO applied. To do so, save this code as defaultdomain.adm in the C:\windows\inf folder.
CATEGORY "Logon Settings"
KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"
POLICY "Default Domain"
PART "Default Domain" EDITTEXT
VALUENAME "DefaultDomainName"
END PART
END POLICY
END CATEGORY
You can then add this template to an existing or new GPO's Computer Configuration section. To do so, select Add/Remove Templates. Click Add and select the defaultdomain.adm file. Because this registry subkey isn't in a standard, managed portion of the registry, you won't see it until you select Filtering under the View menu and clear the "Only show policy settings that can be fully managed" check box.
The new policy will be available under Computer Configuration, Administrative Templates, Logon Settings, Default Domain. The policy sets the specified domain on computers that receive the policy, as the figure shows. During migrations between domains, this policy saves users from having to select a new domain from the drop-down list.
If you want to hide both the dropdown list and set the default domain, you will need to set the default domain as mentioned above and ShowLogonOptions. If you set NoDomainUI you need to have the domain in the username either as domain\username or username@domainame.com.
ShowLogonOptions hides the options, not the options button. The user can still use the options button to show them. I couldn't find a way to hide the option without adding the domain name in the username field.
This worked for me.
CATEGORY "Logon Settings"
KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"
POLICY "ShowLogonOptions"
VALUENAME "ShowLogonOptions"
VALUEON NUMERIC 0
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
|
|
