Windows Forum

Ask something
Discussion Locked

Don't show Login-Username

0 helpful
7 replies

by qsr 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We're running some Win2000 workstations on a WinNT 4.0-server. There is a possibility that the username won't be shown when you are loging in. This option you can configurate on the Server for each workstation in the network. Running a WinNT 4.0 workstation on a WinNT 4.0 Server this won't be a problem - but with Win2000. Configurating that on the Server won't show an effect. Is there a possibility to recover this problem?

7 replies

by curacao_dejavu

See the MS KB Article ID: Q237890

This issue occurs because Windows 2000 stores this information in a different registry location than Windows NT 4.0. Because of this, the last logged on user name may be visible in the logon dialog box. In Windows 2000, this registry key is located at:

HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Policies\System
Value Name: DontDisplayLastUserName
Data Type: REG_DWORD
Value: 0 = Display last logged on user name 1 = Don't display last logged on user

RESOLUTION
To resolve this issue, use Group Policy Editor to apply a policy to not display the name of the last user to log on:

Click Start, click Run, type mmc, and then click OK.

Click Add/Remove Snap-in on the Console menu.

Click Add, click Group Policy, and then click Add.

Leave the Group Policy Object set to "default (Local Computer)", click Finish, click Close, and then click OK.

From the Console, double-click Local Computer Policy, double-click Computer Configuration, double-click Windows Settings, double-click Security Settings, double-click Local Policies, and then click Security Options.

In the right pane, double-click Do not display last user name in logon screen.

Under local policy setting, click Enable, and then click OK.

Quit the Console, and Save when you are prompted to do so.

Restart your computer.

regards,

Leopold

by qsr

Thank you, this will help us for the moment.
But that's the "local-solution". We're still searching for a "server-based-solution". Do you have any ideas?

by pan 13 x

to remove the last login name on a domain policy. open your mmc snap-in. active directory users and computers. double click the folder. you should see your domain at the top of the list. (xxx.com) right click the domain and select properities. the last tab is group policy, select this tab. below you will see default domain polices. select the edit from the bottom menu. under the computer configuration/ windows settings/security settings/security options there is the option to remove lastlogin name. it should be about the 16th one from the top. enable this option. After users log off of their machines the networks domain policy will override the local policy of the computer. this will effect everyone on windows 2000.

by shanghai sam

As for the moment, we do not have any snap-in.
We used to change directly the parameters in the registry.
Please describe which snap-in you mean that I can add it and try your described solution.

by pan 13 x

You must have a windows 2000 server that is a PDC for this to work . Then you will see the snap-ins I was talking about. with nt4.0 you can not create a server based solution.

by qsr

And exactly this is our problem -
our domain is running NT 4.0-server.
Possible solution would be an update to 2000-server. Any other solution isn't possible?

This discussion is closed to new replies.