none
Need a script to verity that we Disabled displaying of "Last date logon" RRS feed

  • Question

  • Hi Scripting Guys 

    Can any one help me to get a script to verify that we Disabled displaying of "Last date logon" 


    • Edited by kaoo313 Monday, December 9, 2013 10:27 AM
    Monday, December 9, 2013 10:26 AM

Answers

  • You configure last interactive logon through a GPO. You must configure the following setting for the GPO with domain controllers in its scope of management if you want to report last interactive logon information to the directory service:

    Computer Configuration| Policies | Administrative Templates | Windows Components | Windows Logon Options | Display information about previous logons during user logon = Enabled        

    If you want to display last interactive logon information to the user, you must configure this setting for both the GPO with domain controllers in its scope of management as well as any GPO with Windows Server 2008 and Windows Vista client computers in its scope of management.

    http://technet.microsoft.com/en-us/library/dd446680(WS.10).aspx

    Note the is  a function of Windows 2008 and later domains and is only configured through Group Policy.  Your Admins have configured this in GP and it cannot be changed locally.  Speak to your Admins about changing this.  You cannot change it.


    ¯\_(ツ)_/¯


    • Edited by jrv Wednesday, December 11, 2013 12:25 PM
    • Marked as answer by Bill_StewartModerator Wednesday, December 11, 2013 2:30 PM
    Wednesday, December 11, 2013 12:23 PM

All replies

  • Hi,

    I'm not sure what you mean by this. Can you explain in more detail what you're looking for?


    Don't retire TechNet! - (Don't give up yet - 12,420+ strong and growing)

    Monday, December 9, 2013 4:45 PM
  • Hi Mike,

    There is a windows policy to Disabled the Displaying of Last log on Date of the Windows computer. I want a VB or powershell script to check these policy are configured on the machines. 

    Hope You understood well

    Tuesday, December 10, 2013 9:37 AM
  • Hi Mike,

    There is a windows policy to Disabled the Displaying of Last log on Date of the Windows computer. I want a VB or powershell script to check these policy are configured on the machines. 

    Hope You understood well

    Where do you se such a policy.  There is a policy to disable the display of the last logged on user.    There is no way to script it in a domain.  Just set the domain policy.


    ¯\_(ツ)_/¯

    Tuesday, December 10, 2013 12:19 PM
  • Then you know the registry name and path of this registry value
    Wednesday, December 11, 2013 5:41 AM
  • Then you know the registry name and path of this registry value

    There is no such policy.


    ¯\_(ツ)_/¯

    Wednesday, December 11, 2013 6:47 AM
  • Wednesday, December 11, 2013 6:48 AM
  • About mentioned url is for disabling last loged username.  But I am looking for a Disabling last logon date. 
    Wednesday, December 11, 2013 12:10 PM
  • About mentioned url is for disabling last loged username.  But I am looking for a Disabling last logon date. 

    Sorry but there is no such setting. I suspect you have some third party software installed.

    ¯\_(ツ)_/¯

    Wednesday, December 11, 2013 12:19 PM
  • You configure last interactive logon through a GPO. You must configure the following setting for the GPO with domain controllers in its scope of management if you want to report last interactive logon information to the directory service:

    Computer Configuration| Policies | Administrative Templates | Windows Components | Windows Logon Options | Display information about previous logons during user logon = Enabled        

    If you want to display last interactive logon information to the user, you must configure this setting for both the GPO with domain controllers in its scope of management as well as any GPO with Windows Server 2008 and Windows Vista client computers in its scope of management.

    http://technet.microsoft.com/en-us/library/dd446680(WS.10).aspx

    Note the is  a function of Windows 2008 and later domains and is only configured through Group Policy.  Your Admins have configured this in GP and it cannot be changed locally.  Speak to your Admins about changing this.  You cannot change it.


    ¯\_(ツ)_/¯


    • Edited by jrv Wednesday, December 11, 2013 12:25 PM
    • Marked as answer by Bill_StewartModerator Wednesday, December 11, 2013 2:30 PM
    Wednesday, December 11, 2013 12:23 PM
  • Here is what the policy says:

    If you disable or do not configure this setting, messages about the previous logon or logon failures are not displayed.

    By default this is not set. If you are seeing these messages then the policy has been enabled and is enforced by the domain controllers. It can only be turned off by the domain controllers.

    If you have removed a computer or have one that has been removed from a domain and this policy has, for some reason, not been disabled you can try to unjoin the domain and join a workgroup. If this doesn't work you can download the GP cleaner tool from Microsoft and use it to remove domain policy.


    ¯\_(ツ)_/¯

    Wednesday, December 11, 2013 12:40 PM
  • Here is the target key but changing this will not remove the policy. It will be reset on next GP update.

    HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisplayLastLogonInfo


    ¯\_(ツ)_/¯

    Wednesday, December 11, 2013 12:49 PM
  • In HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System , I am not able to find the name   "DisplayLastLogonInfo" 
    Wednesday, December 11, 2013 1:24 PM
  • In HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System , I am not able to find the name   "DisplayLastLogonInfo" 

    Then the policy is not available.  For any further issues you will need to either post in the Group Policy forum or contact Microsoft support.

    My suspicion is that you are seeing the effect of a third party add-on.


    ¯\_(ツ)_/¯


    • Edited by jrv Wednesday, December 11, 2013 2:15 PM
    Wednesday, December 11, 2013 2:13 PM
  • But my question is that is there any VB or Power shell script to verify that policy is enabled or disabled

    Thursday, December 12, 2013 4:56 AM