Grp policies...

Posted on 2001-08-28
Last Modified: 2010-04-13

I still have NT4 servers and I have more and more W2K
In NTConfig.pol (default computer/System WinNT) I have checked "Do not display the last connected user".
It doesn't work with the wkstations running W2K.

Is there any tip ??? (except setting each station

Question by:wwalschaerts
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2

Expert Comment

ID: 6431937
Is the NTConfig.pol located in the winlogon directory on your PDC/BDCs?  If not, you will need to use group policy on the W2k stations and set it manually on each station.  Win2k doesn't use local .pol files like NT 4.

The best option for manual configuration is a program called: Multi-remote registry change.  You can find it at: ...Its a pretty handy tool.  You can create a single registry import file and push it out to a large group of machines.


Author Comment

ID: 6432727

Yes NTconfig.pol has the correct location... it works
fine with the workstations running NT4...

Expert Comment

ID: 6433191
Can you give me more information about your network?  I'm assuming its an NT4 domain.  Is it multiple sites?  How many BDCs do you have?

It may be that the Win2k machines are connecting to a BDC that doesn't have the Policy in the netlogon directory.  The NT 4 machines will work because the registry key was set the first time they logged in with the policy in effect.  Even if the NTConfig.pol file was gone the NT 4 machines would still have the right settings.


Accepted Solution

elisch earned 100 total points
ID: 6434308
Ok, I got it figured out now.  On the Win2k boxes there is 2 places where you can see the Dontshowlastusername.

The first place is HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon....however, when I went in and set that to 1 it didn't work...usernames were still displayed.

So I found a second place:  HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System  When I set that to 1 it worked.  I logged out of the system and when I logged back in the previous username was not displayed.

2 solutions here...that I can think of anyway....Use the group policy snap-in for Win2k and remotely (yet manually) update each Win2k workstation.

Second solution, edit the ADM file that correlates to the section you want (dontdisplaylastusername) and add the necessary info to create another checkbox and another registry key specifically for Win2k boxes.  Once you have this, edit your NTConfic.pol file and check the box.  The redistribute the policy to your PDC and let it replicate to the BDC's.  This should then make the necessary changes on the Win2k boxes.

Well...then again, there is a third solution...use that tool I told you about in a previous post to remotely update the Win2k machines.  Would probably be easiest of all.....


Author Comment

ID: 6436178
I have spend a while to understand what to modify in the
adm file.
It is working perfectly.
Thanks a lot

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article describes a method of delivering Word templates for use in merging Access data to Word documents, that requires no computer knowledge on the part of the recipient -- the templates are saved in table fields, and are extracted and install…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit If you want to manage em…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question