Solved

Limiting Domains users can log into

Posted on 2008-06-23
5
226 Views
Last Modified: 2010-04-21
Hi,

My company just recently established a two-way forest trust between 2 active directories domaina.abc.def and domainb.abcdef.def.  I run a few labs and my users are becoming a bit confused.  Is there a way I can limit the drop down box to showing only Domain A instead of both Domain A and Domain B??

-J
0
Comment
Question by:ewsexchange
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 17

Expert Comment

by:Andres Perales
ID: 21849223
The best solution would be for you to setup your UPN suffixes and allow them to log in via their email addresses.
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 21849255
If you've got a 2 way trust from the domain the users log in with through to the other domain, then that will always appear in the list. The only direct solution to actually remove the domain from the list is just to use a one-way trust from the other domain into the main users' domain - that way, the trusting domain will have both domains as a log on option, but the users' trusted domain won't

-tigermatt
0
 
LVL 25

Accepted Solution

by:
slam69 earned 125 total points
ID: 21849259
pretty sure you cant do this directly

however , you might get round this by hiding the list all together and cause it to go to a default

HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon.
The 2 keys to change are:
ShowLogonOptions - set to 0 to hide the domain list & 
DefaultDomainList - set this to the domain you need to logon to
0
 
LVL 25

Expert Comment

by:slam69
ID: 21849266
Although this method might stop you logging on locally or to forest B

Be worth testing though
0
 

Author Closing Comment

by:ewsexchange
ID: 31469902
This is pretty much what I was looking for.  I don't have the ability to change any of the domain settings and only have control over the individual machines.  I can still log in as local or domain b by prefixing the name  domainb/user   etc.   Thanks

0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question