Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've got a demo cross-realm setup between MIT Kerberos and AD. Users can log in just fine as long as the machine is properly configured and the user knows that the realm is all uppercase and case sensitive. I have a feeling though, that once we roll this out to the users, quite a few will remember this, even if we go through above normal outreach. Is there any way to make the Windows 7 login screen more usable? Like automatically uppercase the realm? Or automatically default to our Kerberos realm for user auth?

share|improve this question
up vote 2 down vote accepted

You can set the default via group policy for AD 2008.
Computer Configuration\Administrative Templates\System\Logon "Assign a default domain for logon"

This works for kerberos realms.
This works for windows 7.
This does not work for Vista.
This does not work for XP.

regkey "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultDomainName"

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.