Windows Forum

Ask something
Discussion Locked

Domain Brain Teaser

0 helpful
7 replies

by dan harmeson

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

At the login screen on an NT 4.0 network there are 2 different domains that can be chosen. When the administrators log onto the machines to fix something, their domain becomes the default domain. So when the normal user goes to log on they have tochange the option to their domain. (I know it doesnt sound like it is that hard, but some users dont even notice and then cannot get logged onto the network). Is there a way in NT to jest keep the same domain at the login no matter who logs in?

7 replies

by timwalsh

In short, no. The log-on screen shows the information from the last successful logon.

Actually what is probably showing is not 2 domains, but rather the network domain and the local computer name. Administrators should not need to log-on to thelocal computer in order to fix anything (unless the computer is no longer joined to the domain). Users logged on to the domain with domain administrative privileges are assumed to also have administrative privileges over the computer.
A simple solution would be to have the administrators log-on to the local computer (vs. domain) only if necessary. If it is necessary to log-on to the local computer, have the administrator leave a Post-it note reminder (someplace visible - like the middle of the screen or on top of the keyboard) for the user to check the domain name before logging back on.

I realize that last part may sound like common sense and simple courtesy, but sometimes us administrators can lose sight of the impact our actions can have on users (if not losing sight of the actual existance of users).

Hope this helps.

by dan harmeson

Thank you for your comments. Actually we do have two domains here, we (administrators) are on a national network with the same domain name...the users however have a domain for each facility. Like if the facility was in Santa Clarita the domain would be "Sudder-SC" but the administrators no matter where they are use a common domain, like "COMNET". We just wanted the default to be that paricular facilities domain at all times. I would think that this would be possible, like somewhere in the registry to keep the computer from remembering the last login.

by joseph moore

In the Registry, go to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

There is a vaule called DefaultDomainName. Try setting this to the domian you want.
There might also be CachedDomainName and AltDomainName. Try setting these also to your domain of choice.

But I really think the best solution is to train your users on what a domain is and why they need to always make sure the proper one is in the box before they log in. If you instruct them, then when user BOB comes to you complaining that he can't log in, you can ask BOB if he has the right domain in the box. If he says no, then you can point your finger at him and laugh!
"You were trained on what domain to use, BOB. It is your fault you can't log in!Do it right!!!"

or words to that affect.

hope this helps

by gigelul

Maybe a little help for users can be if you set with system policies editor a custom ?Logon banner?.
Caption: Chose your Domain
Text: Domain1 for?, Domain2 for?

Also you can make this, editing the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon:
- LegalNoticeCaption
- LegalNoticeText

This discussion is closed to new replies.