The following is a proposal for a new FAQ. Comments are welcome and will be integrated into the first post. The first post will then be submitted as a new FAQ.
INFO: Windows XP Professional Fast Logon Optimization
Microsoft has optimized Windows XP to enhance the user experience by creating the impression that the operating system starts up faster. This is achieved by having the login prompt show up before the networt is fully initialized. Additionally, existing users are logged in with cached credentials.
Drawbacks in a domain or corporate environment are that login scripts might not run, policies might not get applied, account expiration warnings might not get displayed, and GPO software distribution might fail.
The logon optimization can be disabled in the following ways
- Local PO via "Computer Configuration\Administrative Templates\System\Logon\ Always wait for the network at computer startup and logon"
- Global PO via "Computer Configuration\Administrative Templates\System\Logon\ Always wait for the network at computer startup and logon"
- Per-machine registry hack via "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon" with registry value "SyncForegroundPolicy"=dword:00000001
- Per-user registry hack via "HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon" with registry value "SyncForegroundPolicy"=dword:00000001
For more information see Microsoft KB305293 Description of the Windows XP Professional Fast Logon Optimization Feature
_________________________
There are two types of vessels, submarines and targets.
