Don’t do this with Vista GPO's ...

Bad things will happen.

In vista there is a GPO called “Display information about previous logons during user logon”

Beware setting this in your environment.

If you configure this as a domain based policy you will no longer be able to logon as a domain user. You will see the following error:

As opposed to what we should see:

To recover you will need to logon as the local admin and revert the domain policy

This is by design. I expect someone to complain about this, but if there were any changes at all in this area , the most I would expect is some kind of additional wording in the GPO about “hey don’t do this in a domain until you have LH domains…” or something like that.

So I just wanted to warn you before you locked all your domain clients out.

Not sure if there is a KB on this yet... Ill look into that.

Spatdsg