Pre-Login AUP Message for Windows - Make it Longer?

[JRA]

Morning all - hopefully everyone knows what I mean, that bit after ctrl+alt+del users will 'ok' on before logging in. Set in GP from Computer > Windows Settings > Security settings > Local policies > Security options > Interactive logon (message title and text.)

 

I was hoping to have a flippin' Lord of the Rings length AUP in there, but Microsoft only want me to have so many characters. Having had a little rummage around the registry I've not found anything that looks like it limits the characters, but does anyone reading know how I might increase this and make my dreams of verbosity a reality?

 

Thanks much any/everyone!

[6Foot2]

Are you using a product that has an AUP built in, but not using the AUP functionality?

 

We have Impero (we don't currently get our users to agree to an AUP, trying to change that and have been for some time. )

[JRA]

Hi DaveP - no nothing like that, just good old GP. Have a MASSIVE AUP but restricted by Microsoft's length so can't fit it all in. Just wondered if it was anything changeable or if I've just gotta put up "Please see website for full AUP and agree to all terms before using this computer" sorta thing.

[Katy]

Hi DaveP - no nothing like that, just good old GP. Have a MASSIVE AUP but restricted by Microsoft's length so can't fit it all in. Just wondered if it was anything changeable or if I've just gotta put up "Please see website for full AUP and agree to all terms before using this computer" sorta thing.

I'm fairly sure you can't change the maximum length - this setting has been there forever and originally in NT4 it was just a popup messagebox (rather than the full screen affair it's turned into these days) hence the short maximum length.

 

On ours we say something along the lines of "Access to this system is subject to the AUP, available in your student planner or on request", and the full thing is printed into the student planners (which they have to sign each year)

[6Foot2]

Haven't looked at AU by GP in a while. Can you hyperlink it to head off any excuse 'Couldn't find it' etc?

[Katy]

Haven't looked at AU by GP in a while. Can you hyperlink it to head off any excuse 'Couldn't find it' etc?

It's a message pops up after Ctrl+Alt+Del but before "enter your user/password", so can't have anything fancy like a clickable link. Best you could do would be the URL as part of the message but they'd then have to type that into a phone to look at it.

[6Foot2]

It's a message pops up after Ctrl+Alt+Del but before "enter your user/password", so can't have anything fancy like a clickable link. Best you could do would be the URL as part of the message but they'd then have to type that into a phone to look at it.

On one of our old networks, to get around the lack of an AUP I used BGInfo to print a message to students on their desktops referring them to a PDF on the same desktop. The PDF described what was expected of them while they used the network.

 

I had to remove it on our newer networks.

 

[JRA]

Cheers both - yes it'll be the 'for full terms see school website' sort of thing. I'm fairly sure now that limit can't be tinkered with.

 

Cheers again though!

[LeMarchand]

Cheers both - yes it'll be the 'for full terms see school website' sort of thing. I'm fairly sure now that limit can't be tinkered with.

 

Cheers again though!

 

Could you set a document of some sort with the full AUP to open full screen at logon? Preface it with "CLOSING, MINIMIZING OR SHRINKING THIS WIDOW WILL CONSTITUTE ACCEPTANCE OF THE AUP BELOW".

[JRA]

Well, yes I *could* but I forsee this RAGGING netlogon (if we stick it there.) Also worriting the users. Also if (perish the thought) one of my users falls foul of the AUP and had an outdated version on %workstation% should we stick them somewhere locally then it might be grounds for muddying the waters.

 

At least one centralised policy on the website can be accessed by things other than a school machine and read first, then we have it to wave at folks should we need.

 

Sound idea though.

[kidpressingbuttons]

I use a vb script that is called at login that displays the policy with a timer then an accept and deny button. Accept closes it. Deny logs them off.

 

edit- found the original. https://github.com/imullings/AUP

 

fully customisable and works well!

Edited February 21, 2018 by kidpressingbuttons

[JRA]

I use a vb script that is called at login that displays the policy with a timer then an accept and deny button. Accept closes it. Deny logs them off.

Wont claim to have made it myself but I did borrow from lots of other ones i found to make something that works for me!

 

Happy to send over a copy.

 

Ooh yes please! Shall I PM you email addy?

 

Thanks.

[kidpressingbuttons]

Just edited my original post- happy to send you my copy if still needed

[LeMarchand]

I use a vb script that is called at login that displays the policy with a timer then an accept and deny button. Accept closes it. Deny logs them off.

 

edit- found the original. https://github.com/imullings/AUP

 

fully customisable and works well!

 

Does it still work on W10? I thought that HTA was no longer supported. (May still use legacy IE, though).

[kidpressingbuttons]

Worked for me