----------------------------------------------------------- Attention: Non-Delivery Report -----------------------------------------------------------
This report is generated by the email server at:
ivytech.edu
The message with subject:
"RE: [ActiveDir] Default Domain"
and attached to this report was not delivered to
the following recipients:
Address: [EMAIL PROTECTED]
Reason: 554 5.5.2 No valid recipients (554)
--------------
--- Begin Message ------ Begin Message ---I too have seen this and can reproduce it over and over. After we migrate a PC from our NT4 domains to AD, Quest DMW sets the default domain to our AD domain. However if the user hits ctrl-alt-del to logon and then ESC and then CTRL-ALT-DEL again, the default domain is set to the local computer account. Kinda a pain. I think it reverts to the AltDefaultDomainName key value, maybe you could set both keys and it would revert back to the correct setting......... ________________________________ From: [EMAIL PROTECTED] on behalf of [EMAIL PROTECTED] Sent: Tue 7/19/2005 5:36 PM To: ActiveDir@mail.activedir.org Cc: ActiveDir@mail.activedir.org; [EMAIL PROTECTED] Subject: RE: [ActiveDir] Default Domain We are using a startup script that has two reg add commands reg add "HKLM\software\microsoft\windows nt\currentversion\winlogon" /v altdefaultdomainname /t REG_SZ /d DOMAINAME /f reg add "HKLM\software\microsoft\windows nt\currentversion\winlogon" /v defaultdomainname /t REG_SZ /d DOMAINAME /f This has worked very well for us during and post migration. Most of our users came from small NT domains and we only finished the 1000 NT domains to 9 AD domains over the last 6 months. Where this does not work is if I choose to logon, then hit escape - for some reason when I hit ctrl alt del the second time the last domain I logged into shows up instead of the specified DOMAINAME above. This might have been specific to one machine or may be a problem with one of the entries - I only saw it the once and have not had time to go back and investigate. Regards; James R. Day Active Directory Core Team Office of the Chief Information Officer National Park Service [EMAIL PROTECTED] "Grillenmeier, Guido" <[EMAIL PROTECTED] To: <ActiveDir@mail.activedir.org> com> cc: (bcc: James Day/Contractor/NPS) Sent by: Subject: RE: [ActiveDir] Default Domain [EMAIL PROTECTED] tivedir.org 07/19/2005 11:59 PM ZE2 Please respond to ActiveDir got ya - makes sense in this case. however, you could also edjucate users to logon via UPN thus not requiring the selection of a domain at all, regardless of the domain-affiliation of the PC used during logon... -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Dienstag, 19. Juli 2005 23:54 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Default Domain I am actually thinking of using it since I have 7 domains in one forest, if someone from a different domain uses someones computer, on reboot the domain that is selected in the drop down list is the proper domain for that computer. Similar to when my helpdesk people login to the local machine, the user doesn't try to then login to the local machine using their domain username, hence reducing phone calls to the helpdesk. Justin A. Salandra MCSE Windows 2000 & 2003 Network and Technology Services Manager Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido Sent: Tuesday, July 19, 2005 5:51 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Default Domain should work just like setting any other registry key on the client. The question is, if you really need it/want it. Most computer migration tools can set that value during the migration of the PC from source to target. But you might very well not want to change this value at the time of the computer-migration => you'll typically want to change it during migration/activation of the user accounts. This is often not done at the same time, so changing the value via GPO with the computer migration could actually be counter-productive. Further, it's not enough if you're implementing a new naming conventions for user-accounts or simply need to change logon-names due to duplicates during a domain-migration that consolidates multiple source domains to one AD domain. In this case you'll no only want to generically update the "DefaulDomainName" value to help your users, but at the same time you might want to update the "DefaultUserName" value with the new accountname for the target domain. Hardly doable with a GPO - I typically do this with custom scripts triggered centrally during account activation (quite independently from the computer migration). But nothing goes over edjucating your users about the changes in the infrastructure and specifically those related to their domain logon - otherwise they potentially stare at another machine and wonder why they can't logon to this one, causing an increase in helpdesk calls... /Guido -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Dienstag, 19. Juli 2005 22:03 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Default Domain Has anyone tried this? I got it off of another list I am a part of. The default domain name is stored in the DefaultDomainName registry value, but no built-in Group Policy setting to control its value. You can easily create a custom .adm file that will let you configure the default domain for computers that have the GPO applied. To do so, save this code as defaultdomain.adm in the C:\windows\inf folder. CATEGORY "Logon Settings" KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" POLICY "Default Domain" PART "Default Domain" EDITTEXT VALUENAME "DefaultDomainName" END PART END POLICY END CATEGORY You can then add this template to an existing or new GPO's Computer Configuration section. To do so, select Add/Remove Templates. Click Add and select the defaultdomain.adm file. Because this registry subkey isn't in a standard, managed portion of the registry, you won't see it until you select Filtering under the View menu and clear the "Only show policy settings that can be fully managed" check box, as the figure at http://list.windowsitpro.com/t?ctl=EA05:2C262 shows. The new policy will be available under Computer Configuration, Administrative Templates, Logon Settings, Default Domain. The policy sets the specified domain on computers that receive the policy, as the figure at http://list.windowsitpro.com/t?ctl=EA08:2C262 shows. During migrations between domains, this policy saves users from having to select a new domain from the drop-down list Justin A. Salandra MCSE Windows 2000 & 2003 Network and Technology Services Manager Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/<<winmail.dat>>
--- End Message ---~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- End Message ---
