Solved

Limiting Domains users can log into

Posted on 2008-06-23
5
231 Views
Last Modified: 2010-04-21
Hi,

My company just recently established a two-way forest trust between 2 active directories domaina.abc.def and domainb.abcdef.def.  I run a few labs and my users are becoming a bit confused.  Is there a way I can limit the drop down box to showing only Domain A instead of both Domain A and Domain B??

-J
0
Comment
Question by:ewsexchange
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 17

Expert Comment

by:Andres Perales
ID: 21849223
The best solution would be for you to setup your UPN suffixes and allow them to log in via their email addresses.
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 21849255
If you've got a 2 way trust from the domain the users log in with through to the other domain, then that will always appear in the list. The only direct solution to actually remove the domain from the list is just to use a one-way trust from the other domain into the main users' domain - that way, the trusting domain will have both domains as a log on option, but the users' trusted domain won't

-tigermatt
0
 
LVL 25

Accepted Solution

by:
slam69 earned 125 total points
ID: 21849259
pretty sure you cant do this directly

however , you might get round this by hiding the list all together and cause it to go to a default

HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon.
The 2 keys to change are:
ShowLogonOptions - set to 0 to hide the domain list & 
DefaultDomainList - set this to the domain you need to logon to
0
 
LVL 25

Expert Comment

by:slam69
ID: 21849266
Although this method might stop you logging on locally or to forest B

Be worth testing though
0
 

Author Closing Comment

by:ewsexchange
ID: 31469902
This is pretty much what I was looking for.  I don't have the ability to change any of the domain settings and only have control over the individual machines.  I can still log in as local or domain b by prefixing the name  domainb/user   etc.   Thanks

0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question