Pre-Login Messaeg

[tscnmuk]

Hi all

I am in the process of writing a pre-login message (the must click on ok to continue one) and am completely stuck and useless at doing this sort of thing.

Basically it needs to say, we are watching everything and have access to all of everything. Any abuse at all of the system or breaking of the AUP will result in sudden death etc etc etc....

Does anybody have any advice regarding proper wording and so on? Or even a good example I could take a look at.

Thanks

Tom

[DaveP]

Removed.

[tosca925]

You can do this via GPO, i am not sure of the exact location as i am not in front of our GPO at the moment but i am sure someone will point you in the right direction

[Jake_89]

There is one way you can do it but you need to do it manually on every computer unless you run a script to do so.

Open Regedit, and go to...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

In Winlogon you will find LegalNoticeCaption, and LegalNoticeText.

Modify the value of LegalNoticeCaption to whatever you want to be displayed at the top of the message box, and Modify the value of LegalNoticeText to whatever you want to be displayed in the messege box. This box will then display each time you press Ctrl+Alt+Del to log on.

Does anyone have the script to modify this Registry Value via GPO?

[localzuk]

There is a tickbox option in the GPO somewhere, there is no need to do it via registry... Don't have the GPO to hand though...

[djm968]

Configuring a Group Policy Setting for a Domain

1. On the domain controller, start the Active Directory Users and Computers snap-in.
2. Right-click the domain object in the left pane, and then click Properties.
3. Click the Group Policy tab.
4. Click Default Domain Policy, and then click Edit.
5. Expand the following folder:
Configuration\Windows Settings \Security Settings\Local Policies\Security Options
6. In the right pane, double-click Policies, and then follow these steps to create the message text:

On a Windows Server 2003-based domain controller:

a. Click Interactive logon: Message title for users attempting to log on, and then type the text that you want to appear in the title bar of the message dialog box.
b. Click Interactive logon: Message text for users attempting to log on, and then type the text of the message that you want to appear in the message dialog box.

[maniac]

I think the group policy location for this is;

Computer Configuration -->> Windows Settings -->>Security Settings -->> Local Policies -->> Security Options

Then there's two options;
Interactive Logon: Message text for users attempting to logon
Interactive Logon: Message title for users attempting to logon

This will display a message I think after the user has pressed alt-ctrl-del but before they enter the login details.

It would also be simple to get a message to display after users have logged on using the VB script msgbox function, and if you wanted to you can have a yes and no button on this one I think, with a no response triggering a workstation shutdown if you know the correct VBS commands (which I don't, but I have seen a script do this before)

Hope that helps,

Mike.

[maniac]

damn it djm968 you typed your message as I was typing mine!! grrrrrr!!

lol.

[djm968]

Must admit I cheated..... CTRL C and CTRL V

http://support.microsoft.com/kb/310430

[maniac]

Fair play. Why didn't I think of that!

Mike

[FN-GM]

But isn’t he after the wording of the message not how to implement it?

[Oops_my_bad]

Wow - I can't believe the OP's question was totally ignored

[mark]

There are example AUPs on the wiki (see the sidebar)

[FN-GM]

but you can't put a whole AUP in that little box

[Oops_my_bad]

but you can't put a whole AUP in that little box

You'd be suprised - at Uni they managed to get a short thesis in that little box :P And uhm, like yeh - you were supposed to read it before every logon