More Logon Registry Tweaks

As you saw in the previous section, the logon security policies are stored in the registry. Windows XP has a number of other registry-related logon settings that we'll explore in this section:

• Controlling the Shift key override of an automatic logon Create the following string value and use it to determine whether the user can override an automatic logon by holding down the Shift key during startup (0 = enable Shift override; 1 = disable Shift override):
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\IgnoreShiftOverride
• Forcing an automatic logon This is similar to overriding the Shift key at startup. That is, the following string setting (you need to add it by hand) determines whether the user can bypass an automatic logon (0 = bypass possible; 1 = bypass not possible):
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ForceAutoLogon
• Disabling logon options The Log On To Windows dialog box (Classic logon) has an Options button that toggles on and off the Log On To list, the Log On Using Dial-Up Connection check box, and the Shut Down button. Use the following DWORD value to control whether these options appear (0 = disable; 1 = enable):
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon \ShowLogonOptions
• Adding text to the logon dialog box Specify text in the following string setting (you need to create the setting by hand) to display a message in the Log On To Windows dialog box above the User Name text box:
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\LogonPrompt
• Disabling the dial-up logon If you don't want users to attempt to use a dial-up connection to log on, create the following string setting and use it to disable the Log On Using Dial-Up Connection check box in the Log On To Windows dialog box (0 = disable; 1 = enable):
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\RASDisable