MSGINA以及禁用登陆对话框中登陆到域的选项:前日在翻阅MSGINA的信息的时候，无意中看到了关于如何定制MSGINA的一些文章，其中有一篇 The Essentials of Replacing the Microsoft Graphical Identification and Authentication Dynamic Link Library 其中提到

Disabling Domain Option of Logon Dialog Box

It is possible to disable the domain option on the dialog box brought up by WlxLoggedOutSas. To do this, set the registry value NoDomainUI of type [Reg_Dword] to a value of 1. This would have users enter their user names in the form?for example, username@domain.

活活，这就是很多AD管理员曾经提到过的一个问题，那就是如何屏蔽登陆对话框中的那个登陆到域的选项，如此作就可以了：

REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /V NoDomainUI /T REG_DWORD /D 1 /F

噢，这个reg 在windows xp and windows 2k3下是可以直接执行的，大家完全可以将它做成计算机启动脚本来批量部署，这下大家满意了吧其实这篇文章中还提到很多其他有意思的东西，比如常见的 Loading the GINA
Winlogon loads the GINA DLL by first calling
GetProfileString to retrieve the name of the GINA DLL, which is located in HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\GinaDLL

比如

The actual path of the Winlogon key is:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon.

The [REG_SZ] value type makes it convenient to query the key values using the GetProfileString and GetProfileInt functions.