Interactive logon message in Group Policy

[fuller772]

I have a interactive logon message in Group Policy set that after the user hits ctrl+alt+del it displays a message along with an OK box the user must agree to by hitting enter. The problem I have is on two indexing servers I need them to startup automatically and login. I have them setup to where they will login automatically except the fact that they stop on the interactive logon message screen and someone must hit enter.

Is there a way of getting rid of this on certain machines? I have tried defining a local policy but it doesn't seem to work. Any suggestions. Thanks for your help.

 

[markdmac]

Add these machines to a group and then add that group to the security settings on the GPO. Set them to Deny that policy.

I hope you find this post helpful.

Regards,

Mark

 

[fuller772]

Worked like a champ, thanks for the help.

 

[Daveyd123]

Mark,

What do you mean by adding the group to the security settings on the GPO and having them deny the policy?

 

[markdmac]

I am referring to the security tab from within a GPO. There you can specify to explicity apply or deny the policy to a subset of computers or users.

I hope you find this post helpful.

Regards,

Mark

 

[Daveyd123]

Thats what I thought you meant. You could also put the computer objects in an OU and Block inheritance to that GPO...granted that is the only setting in that GPO or else you would alco block all other settings

 

[markdmac]

Daveyd123,

Moving the computer and blocking policy inheritance is one solution, but it will then also block all other GPOs from being applied. We don't have enough info to go on to know if that would be a viable option.

I hope you find this post helpful.

Regards,

Mark

 

[Daveyd123]

You're right, unless all other GPOs are enforced. You're solution would be easier, I just thought I'd throw out something else

 

[Daveyd123]

Also, the Security tab you are referring to, is it in GPMC? If so, where?

 

[markdmac]

Yes, still available in GPMC. Right click the GPO name when editing the GPO and choose Properties.

I hope you find this post helpful.

Regards,

Mark