Pre-Login Messaeg

[tscnmuk]

Hi all

 

I am in the process of writing a pre-login message (the must click on ok to continue one) and am completely stuck and useless at doing this sort of thing.

 

Basically it needs to say, we are watching everything and have access to all of everything. Any abuse at all of the system or breaking of the AUP will result in sudden death etc etc etc....

 

Does anybody have any advice regarding proper wording and so on? Or even a good example I could take a look at.

 

Thanks

 

Tom

[6Foot2]

Removed.

[tosca925]

You can do this via GPO, i am not sure of the exact location as i am not in front of our GPO at the moment but i am sure someone will point you in the right direction

[Jake_89]

There is one way you can do it but you need to do it manually on every computer unless you run a script to do so.

 

Open Regedit, and go to...

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

 

In Winlogon you will find LegalNoticeCaption, and LegalNoticeText.

 

Modify the value of LegalNoticeCaption to whatever you want to be displayed at the top of the message box, and Modify the value of LegalNoticeText to whatever you want to be displayed in the messege box. This box will then display each time you press Ctrl+Alt+Del to log on.

 

Does anyone have the script to modify this Registry Value via GPO?

[localzuk]

There is a tickbox option in the GPO somewhere, there is no need to do it via registry... Don't have the GPO to hand though...

[djm968]

Configuring a Group Policy Setting for a Domain

 

1. On the domain controller, start the Active Directory Users and Computers snap-in.

2. Right-click the domain object in the left pane, and then click Properties.

3. Click the Group Policy tab.

4. Click Default Domain Policy, and then click Edit.

5. Expand the following folder:

Configuration\Windows Settings \Security Settings\Local Policies\Security Options

6. In the right pane, double-click Policies, and then follow these steps to create the message text:

 

On a Windows Server 2003-based domain controller:

 

a. Click Interactive logon: Message title for users attempting to log on, and then type the text that you want to appear in the title bar of the message dialog box.

b. Click Interactive logon: Message text for users attempting to log on, and then type the text of the message that you want to appear in the message dialog box.

[maniac]

I think the group policy location for this is;

 

Computer Configuration -->> Windows Settings -->>Security Settings -->> Local Policies -->> Security Options

 

Then there's two options;

Interactive Logon: Message text for users attempting to logon

Interactive Logon: Message title for users attempting to logon

 

This will display a message I think after the user has pressed alt-ctrl-del but before they enter the login details.

 

It would also be simple to get a message to display after users have logged on using the VB script msgbox function, and if you wanted to you can have a yes and no button on this one I think, with a no response triggering a workstation shutdown if you know the correct VBS commands (which I don't, but I have seen a script do this before)

 

Hope that helps,

 

Mike.

[maniac]

damn it djm968 you typed your message as I was typing mine!! grrrrrr!!

 

lol.

[djm968]

Must admit I cheated..... CTRL C and CTRL V

 

http://support.microsoft.com/kb/310430

[maniac]

Fair play. Why didn't I think of that!

 

Mike

[FN-GM]

But isn’t he after the wording of the message not how to implement it?

[Oops_my_bad]

Wow - I can't believe the OP's question was totally ignored

[MkII]

There are example AUPs on the wiki (see the sidebar)

[FN-GM]

but you can't put a whole AUP in that little box

[Oops_my_bad]

but you can't put a whole AUP in that little box

You'd be suprised - at Uni they managed to get a short thesis in that little box And uhm, like yeh - you were supposed to read it before every logon

[SpuffMonkey]

but you can't put a whole AUP in that little box

 

No...but you can say words to the effect that if the user clicks OK to continue that they accept the terms of the AUP that is on the walls in all computer suites, in their student handbook or in their staff handbook - so no one has the excuse that they didn't know that there was an AUP.

[FN-GM]

well thats what tscnmuk is asking for, he would like to know what to put and how to put it

[webman]

By logging on to the network you understand and accept the terms of use outlined in the acceptable usage policy. This can be found on a wall in every IT room, or in your student planner/staff handbook.

[FN-GM]

and school website, could include that your account will be disabled if you breach them

[webman]

Well in most instances you will have to log on to the network to access the website in the first place... 8)

[FN-GM]

yes but if it’s on the website they can’t say they can’t get access to a copy

[phillipmillward]

Hi All,

 

Does anyone use this and if so are you willing to post what lovely message you give to you kids that we all know they will never read.

 

Thanks

 

Phil

[User3204]

We use it, I'm not at work, otherwise I would paste it here.

 

We tried to put in the whole AUP, but discovered there is a character limit, and no way to do CR/LF. So we cut out a large amount of the AUP, so it basically translates as "be good".

 

If I remember I will paste it here tomorrow..

[SpuffMonkey]

Hi All,

 

Does anyone use this and if so are you willing to post what lovely message you give to you kids that we all know they will never read.

 

Thanks

 

Phil

 

This is what we say

 

By clicking on the OK button, you are agreeing to abide, by the rules laid out in the College Acceptable Usage Policy. A copy of the policy is included in your Handbook. The basics are also displayed on the walls of the Computer Suites. If you do not agree to follow the policy, do not log on to this computer.

[mrforgetful]

I once looked at a free policy thing that launched when you logged it, it wasn't much bigger than the prelogin box but had two buttons, an Accept and a Decline, which would log you straight off again.