Hi Guys , 

I have a requirement to set up a solution that prevents users from logging in to a workstation while it is logged off and installing software. Not all software we install like this , this is just for a few that can only be installed in log off state. The issue we have is currently some users are logging in and interrupting installations. I am putting together a task sequence that runs (once machine is logged off) as follows

1. Replaces the standard log on screen with a background message that mentions sotware is installing. 
2.Lock keyboard and mouse
3. Run installation 
4.Restore standard logon screen
5.Restore keyboard and mouse functionality
6.Restore the standard logon screen once installation ends. 

I have background , installation commands but I cannot seem to figure out how to hide the the standard log on screen? . Can anyone assist/advice or point me to a script that can address this? Many thanks in advance 
0 Comments   [ + ] Show Comments


Please log in to comment


the login screen can be handled by setting the OEM background


OEMBackground DWORD=1

and drop the image into 


you can have the task sequence rename the existing one (if used) copy in the new wallpaper then once finished delete the replacement wallpaper and rename the old one back
however this wallpaper is only refreshed during a log off/lock cycle

regarding the keyboard and mouse you can install the driver toolkit and acquire devcon and use that to disable the keyboard and mouse, and re-enable it that way.
Answered 07/01/2016 by: sparky86
Third Degree Brown Belt

  • thanks sparky. I will give this a go :-D
Please log in to comment
Humm, bummer.

This is going to be ugly, but it will probably work. What you need to do is find the key that corresponds to this GPO setting. 

I take the install will only run when no one is logged on, so that's good. As part of that process write the registry key which will disable interactive logon, this should stop people..logging on. Once its all done, remove the key. Watch out GPO dosent blast the key out if its set at Domain level.

Use a tool like RegShot to find the Registry Policy key, or you can just do a compare with a registry export with Notepad++ etc.
Answered 07/01/2016 by: rileyz
Red Belt

  • Thanks for your advice mate , I had checked this avenue and someone told me this policy is not saved to registry. Apparently he knows someone that knows someone that was told this by a well known MVP :D.. still I will consider this as plan B.
Please log in to comment
Answer this question or Comment on this question for clarity