90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!
Customize Windows 7 Logon Screen
I need to customize the logon screen for Windows 7 Enterprise Edition 64-Bit. When a user hits ctrl-alt-del to login I want to add a link underneath the user name and password to our password reset webpage. How would I go about doing this? Thanks.
Asked:
-
3
2
2
2 Solutions
Well there are a lot of ways to chenge the logon background picture and adding some texts, starting from direct registry editing (Change and customize Windows 7's Logon screen wallpaper) to "ultimate tools" like Logon WorkShop but I think none of these tools could you help to make a "link" to your webpage - because before logging on how the user will be able to "navigate" to whatever web page would be?... that's why the "reset password" that appear underneath the password field always ask for a "Drive A:" (or USB disk).
What could still be achieved even by displaying a simple "custom logon message" using a local or group policy (like here Group policy interactive logon message) is to "publish" a short instruction or link that will have to be written down on something and used to another "already logged-on PC" to reset the password from you web server.
So the "change logon background tools" I think it could be usefull only if the text you want to publish for your instruction will be longer that the one that could be written through Local/Group Policy so you'll have the text on that background picture.
What could still be achieved even by displaying a simple "custom logon message" using a local or group policy (like here Group policy interactive logon message) is to "publish" a short instruction or link that will have to be written down on something and used to another "already logged-on PC" to reset the password from you web server.
So the "change logon background tools" I think it could be usefull only if the text you want to publish for your instruction will be longer that the one that could be written through Local/Group Policy so you'll have the text on that background picture.
I know about changing the wallpaper and adding a message to the logon screen. I was hoping to possibly add a link that would start IE in kiosk mode set to our password reset page within the interactive login message or perhaps change the default behavior of the built-in password reset option.
It seems that you would like somethink like a "shell" or another "Limited UI" but BEFORE logon - this would be impossible.
If you utilized the Windows Welcome Screen it will allow you to show a local user account. Setup a new user called Reset Password with no password, set to never expire, and cannot change own password. Give them guest access. Login as the user so their user hive is created. Log out and back in as an admin. Edit the registry and set the shell for that user to IE (http://msdn.microsoft.com/en-us/library/ms838576(v=winembedded.5).aspx this will work in win7). You can disable the command and nav bars via the registry with "\Software\Policies\Micros
Click Start, click Run, type mmc, and then click OK.
Click Console, and then click Add/Remove Snap-in.
On the Standalone tab, click Add.
In the Add Standalone Snap-in window, click Group Policy, and then click Add.
In the Group Policy Object box, type select the new user.
Click Start, click Run, type mmc, and then click OK.
Click Console, and then click Add/Remove Snap-in.
On the Standalone tab, click Add.
In the Add Standalone Snap-in window, click Group Policy, and then click Add.
In the Group Policy Object box, type select the new user.
Question has a verified solution.
Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.
Have a better answer? Share it in a comment.
Join & Write a Comment Already a member? Login.
Featured Post
Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.
One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.
Tackle projects and never again get stuck behind a technical roadblock.
Join Now
What you could do is create a dummy account that has IE running in Kiosk mode as the shell.
Actually, it looks like your answer may be "Credential Provider". Here is more info on it http://msdn.microsoft.com/en-us/magazine/cc163489.aspx