walt @ truman :: blog

Here's an administrative template for Microsoft Active Directory Group Policy that will allow you to setup systems to automatically logon. We use this for public terminal web browsing machines to allow them to automatically logon and start a web browser. To use this first add the adm template to your group policy and then under the view menu select "Filtering" and make sure "Only show policy settings that can be fully managed" is not checked. See screenshot here.

Download AutoLogon.adm

Begin Code (autologon.adm)

CLASS MACHINE
CATEGORY "System"
CATEGORY "Logon"
POLICY "AutoLogon"
EXPLAIN "These settings can be used to allow the system to logon automatically. To enable autologon, set the first two settings (AutoAdminLogon and ForceAutologon) to 1, and then fill in the appropriate account information. Keep in mind that this information will be stored in cleartext in the systems registry."
KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"

PART "AutoAdminLogon" NUMERIC REQUIRED TXTCONVERT
VALUENAME "AutoAdminLogon"
MIN 0 MAX 1 DEFAULT "0" SPIN 1
END PART

PART "ForceAutoLogon" NUMERIC REQUIRED TXTCONVERT
VALUENAME "ForceAutoLogon"
MIN 0 MAX 1 DEFAULT "0" SPIN 1
END PART

PART "DefaultUserName" EDITTEXT REQUIRED
VALUENAME "DefaultUserName"
DEFAULT "Username" MAXLEN 128
END PART


PART "DefaultPassword" EDITTEXT REQUIRED
VALUENAME "DefaultPassword"
DEFAULT "Password" MAXLEN 128
END PART

PART "DefaultDomainName" EDITTEXT REQUIRED
VALUENAME "DefaultDomainName"
DEFAULT "Domain" MAXLEN 128
END PART

PART "AltDefaultUserName" EDITTEXT REQUIRED
VALUENAME "AltDefaultUserName"
DEFAULT "Should match username above" MAXLEN 128
END PART

PART "AltDefaultDomainName" EDITTEXT REQUIRED
VALUENAME "AltDefaultDomainName"
DEFAULT "Should match domain above" MAXLEN 128
END PART

END POLICY
END CATEGORY
END CATEGORY