MDT - Legal Notice Text breaks deployment (how to easily avoid)

[cstreet]

Hi, I've just solved my problem with MDT breaking after legal notice text / logon message.

 

There is a very simple way to delay the legal message based upon the presence of C:\_SMSTaskSequence.

 

If you are using the GPO for "Interactive logon: Message text for users attempting to log on" and "Interactive logon: Message title for users attempting to log on" it's simple: DON'T!!!!!

 

Instead of using the Interactive Logon Policy items, create registry items for the below...

 

"SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\legalnoticetext"

"SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\legalnoticecaption"

 

You can then apply "Item Level Targeting" on these and only apply is folder C:\_SMSTaskSequence does NOT exist.

 

It's as simple as adding a new "File Match" item and then right click on it, go to "Item Options", then choose "Is Not". Then change "Match Type" to "Folder" and enter "C:\_SMSTaskSequence" in the "Path".

 

Bob's your uncle, MDT delayed Legal Notice Text which will apply after the MDT has finished (folder disappears)

[namarjeet]

hi, I am very new to MDT and really like to approach on how to delay the legal note. Could you help me with the details step for this process, please? I am not able to figure out from where to start and how to delay the legal notice test in MDT process.

 

MDT - Legal Notice Text breaks deployment (how to easily avoid)

 

 

Amar

[cstreet]

Hi namarjeet, MDT gets stuck after the workstation is added to the domain if the legal notice is configured before it's finished.

I'm guessing that if you're having this issue you have a legal notice already configured.

 

 

How are you configuring the legal notice text?

 

 

A) Are you using the native Group Policy for that computer?

Check in the policies for...

"Interactive logon: Message text for users attempting to log on"

"Interactive logon: Message title for users attempting to log on"

Located here...

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

...and remove this from your policy. Set it to Not Configured.

 

 

B) Is it in the registry of the build image?

Check the registry of the computer before you capture it.

Look for...

"SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\legalnoticetext"

"SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\legalnoticecaption"

...and remove them.

 

 

C) Are you using my suggestion to deploy the registry items using Group Policy?

[namarjeet]

Hi Cstreet, Thank for the quick reply. I wanted to try out your suggestion to deploy the registry. do I need to make the changes in Group Policy console or we can edit the registry from task sequence in MDT ?

[cstreet]

Hi, the legal text registry settings are applied via group policy. You need to use Group Policy to apply the registry settings with the Item Level Targeting as per my instructions.

Before you apply the registry settings you should check that the legal text is NOT applied anywhere else.

Please remove your legal text from everywhere and attempt to build a machine with MDT. This will make sure that MDT is working in your environment.

When MDT is tested working you can then try adding the legal text as I explained in my post.