GPO and Clear last user name

[lilcam]

All workstations are running Windows 2000 Professional in an Active Directory environment.

I've created a group policy to affect only students and everything seems to be working fine except for the "clear last user name..." option. Everytime someone logs off, their username is still there. I've disabled and re-enabled this option to no avail. This is the ONLY group policy that is in affect.

The GPO is affecting the domain level (I think). I right click my domain name (sacred-heart.org) and did it through there. I did notice a default group policy set under the domain controller OU.

 

[sumaya2]

can you tell me what your settings are in the local policy settings? It should tell you the effective settings.

 

[lilcam]

you mean the local policy settings on the workstation themselves?

It doesnt make any sense because I can make changes to other things and it would work, but not this particular issue.

 

[koquito]

So did you check your domain policies? You should look there.. A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!

 

[lilcam]

ive checked the domain policy. it is enabled

 

[koquito]

What do you have under Domain Security POlicies-->Security OpTions (Display last user name...) . IS it enable or disable? A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!

 

[sumaya2]

the reason i asked you about the local policy settings is that it will say the effective setting by reading the effective settings you can start to troubleshoot the gpo if it is not reflected in the local settings

 

[lilcam]

Under "Domain Security POlicies-->Security OpTions"
That option is enabled. Nothing yet. I waited for over 10 minutes and it still doesnt work. I can change the option to remove the shutdown button from the login screen, but for some reason clear last user doesnt seem to work!

 

[brontosaurus]

can you check one of these workstations for the DontDisplayLastUserName value in the registry key : HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
and see that it's set to 1?