Grp policies...

Posted on 2001-08-28
Last Modified: 2010-04-13

I still have NT4 servers and I have more and more W2K
In NTConfig.pol (default computer/System WinNT) I have checked "Do not display the last connected user".
It doesn't work with the wkstations running W2K.

Is there any tip ??? (except setting each station

Question by:wwalschaerts
  • 3
  • 2

Expert Comment

ID: 6431937
Is the NTConfig.pol located in the winlogon directory on your PDC/BDCs?  If not, you will need to use group policy on the W2k stations and set it manually on each station.  Win2k doesn't use local .pol files like NT 4.

The best option for manual configuration is a program called: Multi-remote registry change.  You can find it at: ...Its a pretty handy tool.  You can create a single registry import file and push it out to a large group of machines.


Author Comment

ID: 6432727

Yes NTconfig.pol has the correct location... it works
fine with the workstations running NT4...

Expert Comment

ID: 6433191
Can you give me more information about your network?  I'm assuming its an NT4 domain.  Is it multiple sites?  How many BDCs do you have?

It may be that the Win2k machines are connecting to a BDC that doesn't have the Policy in the netlogon directory.  The NT 4 machines will work because the registry key was set the first time they logged in with the policy in effect.  Even if the NTConfig.pol file was gone the NT 4 machines would still have the right settings.


Accepted Solution

elisch earned 100 total points
ID: 6434308
Ok, I got it figured out now.  On the Win2k boxes there is 2 places where you can see the Dontshowlastusername.

The first place is HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon....however, when I went in and set that to 1 it didn't work...usernames were still displayed.

So I found a second place:  HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System  When I set that to 1 it worked.  I logged out of the system and when I logged back in the previous username was not displayed.

2 solutions here...that I can think of anyway....Use the group policy snap-in for Win2k and remotely (yet manually) update each Win2k workstation.

Second solution, edit the ADM file that correlates to the section you want (dontdisplaylastusername) and add the necessary info to create another checkbox and another registry key specifically for Win2k boxes.  Once you have this, edit your NTConfic.pol file and check the box.  The redistribute the policy to your PDC and let it replicate to the BDC's.  This should then make the necessary changes on the Win2k boxes.

Well...then again, there is a third solution...use that tool I told you about in a previous post to remotely update the Win2k machines.  Would probably be easiest of all.....


Author Comment

ID: 6436178
I have spend a while to understand what to modify in the
adm file.
It is working perfectly.
Thanks a lot

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Cloud-based technologies and services will continue to grow in popularity in 2017 thanks to the simple, scalable and cost-effective solutions they deliver. Here are three areas where cloud adoption is poised to really take off.
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now