So we setup some clones to use single sign on, with the "Only allow local user profiles" GPO.
This was fine until people who are partially sighted had problems using them.
- Setting "nodispcpl" unlocked the DPI setting, but it only applies at log off, where clone gets refreshed.
- Setting "LogPixels" in .DEFAULT section applies to the logon screen, but again only to users after they logoff.
Took me a while but worked out a solution:
- Run REGEDIT
- Select Computer, HKEY_USERS
- File, Load Hive, open C:\Users\Default\NTUSER.DAT ( folder is hidden and file is hidden system )
- Key Name: TEMP
- Within Computer\HKEY_USERS\TEMP\Control Panel\Desktop
- Add a DWORD (32-Bit) a.k.a. REG_DWORD named: LogPixels
- Set HEX value to 60 for default small, 78 for medium, 90 for larger.
- Select the top level TEMP key, File, Unload Hive, Confirm Yes.
You could copy your normal template and make the changes, but that means an extra template to maintain.
Or instead, run "ATTRIB -S -H -R -A C:\Users\Default\NTUSER.DAT" and copy NTUSER.DAT to Scripts\Startup in a new GPO.
Also in that folder create a batch file to be run with the following commands:
ATTRIB -S -H -R -A C:\Users\Default\NTUSER.DAT
COPY /Y %0\..\NTUSER.DAT C:\Users\Default\NTUSER.DAT
In the OU where the normal clones are added, make a sub OU and attach the new GPO.
Create a new pool, same template as the main pool, but get put in the new sub OU.
Entitle to the group of users who need the custom DPI.