Hide other domains from drop down box.

Posted on 2006-03-24
Last Modified: 2008-03-10

I want to know if it's possible to hide other domains from the drop down box at the login prompt.  We have a scenario where we have a subdomain that needs to be part of the same forest as other sub domains and will share some of the same resources such as exchange and some sql servers in the root level domain but users in london domain are not allowed to drop down the domain box at login to see the New York domain for example and vice versa
Question by:i_campbell
    LVL 51

    Expert Comment

    I don't think this is possible.  There is no problem with leaving it - unless the user has an account in the other domain, they can't log into it.

    LVL 48

    Expert Comment

    Hi i_campbell,

    just to add my two cents, we have just configured a pretty crazy domain structure and i know of absolutely no way to hide domains from the list, if anyone does i will be very keen to know how :)


    Author Comment

    For legal reaons we have to stop a user from one domain logging onto a computer in the other domain by selecting their login box.

    What about with by setting the DefaultDomainName registry value as per

    I know this makes it appear in the box but can you restrict the other domains from showing?

    LVL 3

    Expert Comment

    I would do this by stating what machines the user can logon to.

    1. Open up AD users and computers.
    2. Right-click the username you need to restrict access
    3. Select the Account Tab
    4. Click "Log on to" button
    5. Select "The following Computers" bullet
    6. Type in the computernames you want the user to be able to log on to. Don't include the ones you don't want him to beable to log on to

    Hope that helps


    LVL 23

    Accepted Solution


    You can FORCE them to use their UPN login name, and remove the drop down box completely:

    To remove the domain drop-down list from the logon screen and force users to use their full user principal name (UPN), perform these steps:

    Start the registry editor (regedit.exe).
    Navigate to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon registry subkey.
    From the Edit menu, select New, DWORD value.
    Enter a name of NoDomainUI and press Enter.
    Double-click the new value and set it to 1. Click OK.
    Reboot the machine.
    The logon screen will no longer show a drop-down list for domains, and users will need to enter the full UPN to log on. For example, the user of an account called John in domain will enter the logon name

    One word of caution on this:

    1.  The user has to use their UPN, not their pre-windows 2000 login (so if your UPN is john.smith but your pre2k login is jsmith, they won't be able to use jsmith anymore) and they'll have to include the part too.
    LVL 23

    Expert Comment

    Thanks for the points!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
    I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now