Solved

Limiting Domains users can log into

Posted on 2008-06-23
5
212 Views
Last Modified: 2010-04-21
Hi,

My company just recently established a two-way forest trust between 2 active directories domaina.abc.def and domainb.abcdef.def.  I run a few labs and my users are becoming a bit confused.  Is there a way I can limit the drop down box to showing only Domain A instead of both Domain A and Domain B??

-J
0
Comment
Question by:ewsexchange
5 Comments
 
LVL 17

Expert Comment

by:Andres Perales
ID: 21849223
The best solution would be for you to setup your UPN suffixes and allow them to log in via their email addresses.
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 21849255
If you've got a 2 way trust from the domain the users log in with through to the other domain, then that will always appear in the list. The only direct solution to actually remove the domain from the list is just to use a one-way trust from the other domain into the main users' domain - that way, the trusting domain will have both domains as a log on option, but the users' trusted domain won't

-tigermatt
0
 
LVL 25

Accepted Solution

by:
slam69 earned 125 total points
ID: 21849259
pretty sure you cant do this directly

however , you might get round this by hiding the list all together and cause it to go to a default

HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon.
The 2 keys to change are:
ShowLogonOptions - set to 0 to hide the domain list & 
DefaultDomainList - set this to the domain you need to logon to
0
 
LVL 25

Expert Comment

by:slam69
ID: 21849266
Although this method might stop you logging on locally or to forest B

Be worth testing though
0
 

Author Closing Comment

by:ewsexchange
ID: 31469902
This is pretty much what I was looking for.  I don't have the ability to change any of the domain settings and only have control over the individual machines.  I can still log in as local or domain b by prefixing the name  domainb/user   etc.   Thanks

0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Powershell: Check if WinRM is listening 3 39
Can't Update AD Group Policy Settings 10 22
exchange, active directory 4 23
Locating a GPO setting 3 23
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Synchronize a new Active Directory domain with an existing Office 365 tenant
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now