Re: Registry changes made via ADM file disappear after a reboot



As far as I understand, the ShowLogonOptions entry changes depending on
whether the most recently logged on user decided to click on the Options
command button in the Log On to Windows dialog box - so I don't believe that
your attempt to set it in the manner described in your post will actually
bring the desired result. While the same applies to the DefaultDomainName
registry entry, if you assign it using Domain textbox on Logon Settings tab
of RDP-Tcp Properties (Terminal Services Configuration) console, this should
apply to every subsequent logon via RDP.

hth
Marcin


"RabidVermin" <RabidVermin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6C2F7B48-C731-4340-8625-A340FAC85BD4@xxxxxxxxxxxxxxxx
I am having a problem with a registry setting that I am updating via an ADM
I
have imported into the GPO and I have been tearing my hairout trying to
figure this out.

Basically, I need to make the ShowLogonOptions
(HKLM/Software/Microsoft/Windows NT/Winlogon) setting from 1 to 0 and set
the
default domain. We are being told by auditors that we cannot display the
"Log on to:" box on any of our terminal servers. I created a custom ADM
that
I found here:

http://www.tomshardware.com/forum/223570-46-remove-domain-drop-list

I am able to add the ADM without any trouble. I then run a gpudate and I
check the registry and I see the registry value change from a 1 to a 0. I
reboot the server and the registry value reverts back to 1.

I run rsop.msc and gpresult and it shows that I am updating the correct
policy. Just for good measure I applied the policy to every GPO that I
have
in my domain. I don't have any special log out scripts, this is a pretty
vanilla server.

There are a couple of things that might have bearing on any answers to my
forthcoming questions. First, I am testing these settings on a
development
domain controller at my house. Second, I have to unapply (uncheck) the
filter "Only show policy settings that can be fully managed" otherwise I
cannot see the settings in the Administrative Template that I created and
imported as described above.

My question is how do I get these settings to apply to the registry via
the
GPO and then have them stick after a reboot? I am fairly new to GPO's and
ADMs. Am I missing something fundamentally easy here?

Thanks and I look forward to the reply.



.


Loading