Ronen- What I've seen is that the key you've listed below is populated when I set local policy on a machine that is part of a domain, but I'm not connected to the domain. My guess is that this is Windows' way of preventing a disconnected user from overriding domain policy by simply setting it locally when they're offline. Are you setting this policy in a local GPO and if so, are you connected to the domain when you set it?
-----Original Message-----
From: [EMAIL PROTECTED] on behalf of Yakir, Ronen
Sent: Sun 5/9/2004 5:24 AM
To: [EMAIL PROTECTED]
Cc:
Subject: RE: [ActiveDir] Setting \winlogon\welcome by ADM
Hi
What I see is the the following key is generated when I set the policy
in the gpo mmc
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group
Policy
Objects\{15087322-E2C5-4C7A-902A-E813FA21EB66}Machine\SOFTWARE\Microsoft
\Windows NT\CurrentVersion\Winlogon]
"Welcome"=hex(2):25,00,63,00,6f,00,6d,00,70,00,75,00,74,00,65,00,72,00,6
e,00,\
61,00,6d,00,65,00,25,00,00,00
But after that, the actual registry key (Software\Microsoft\Windows
NT\currentversion\Winlogon\welcome) is not created and the value is not
set.
Does this key needs to be setup by the policies regkey
(hklm\software\microsoft\windows\currentversion\policies\system) or
directly?
Ronen
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
Sent: Thursday, May 06, 2004 8:30 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Setting \winlogon\welcome by ADM
Ok. I'm not sure I understand what you're seeing. You say that the
"group policy objects reg key is being updated". Does that mean you see
it appearing in the GPO Editor UI as being enabled but when you process
the GPO, it does not get stamped on the workstation's registry?
If so, this might be a separate problem. Can you run Gpresult on the
workstation and see what it returns?
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Yakir, Ronen
Sent: Thursday, May 06, 2004 12:24 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Setting \winlogon\welcome by ADM
Hi
Only tested it today.
Well - it does not work.
The ADM template is loading, the group policy objects reg key is being
updated.
But, the actual desired registry key is not affected (after secedit.
Logoff and logon)
Ronen
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
Sent: Wednesday, May 05, 2004 8:20 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Setting \winlogon\welcome by ADM
Hi-
I think this might work. Give it a go. I made the assumption that you
wanted %computername% to be resolved to the actual machinename. If not,
then go ahead and remove the EXPANDABLETEXT keyword.
CLASS MACHINE
CATEGORY "set welcome"
POLICY "Display Computer Name"
KEYNAME "Software\Microsoft\Windows NT\currentversion\Winlogon"
PART "Enter Message:" EDITTEXT EXPANDABLETEXT
DEFAULT "%computername%"
VALUENAME "Welcome"
END PART
END POLICY
END CATEGORY
Darren
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Yakir, Ronen
Sent: Tuesday, May 04, 2004 2:17 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Setting \winlogon\welcome by ADM
Hi
I am trying to set the \software\microsoft\windows
nt\currentversion\winlogon\welcome key so that the text will appear in
the alt-ctrl-del screen.
Doing so directly works, but not by gpo.
This is the adm I have tried:
================================
CLASS MACHINE
CATEGORY "set welcome"
POLICY "Display Computer Name"
KEYNAME "Software\Microsoft\Windows NT\currentversion\Winlogon"
PART "Computer name"
VALUENAME "Welcome"
Value text "%computername%"
END PART
END POLICY
END CATEGORY
==================================
But no success
Any help?
Thanks
Ronen
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
<<winmail.dat>>
