Windows 2003 Login banner 1

[lovalles]

i want to create the network policy when the user logs into the domain a Banner is displayed with the LAN rules.
Where can i activate this feature?
thanks
lovalles

 

[grantagp]

Looking at your problem if your running a windows 2000 or 2003 domain you could edit the default domain policy to display a message to users before they log on.

To set it just configure the default domain policy (AD Users & Computers => Right Click your domain ie yourdomain.com and left click on properties and then sellect the group policy tab and then edit the default domain policy)

The settings in question are located at:
Computer Config - Windows Settings - Security Settings -Local Policies - Security Options:

* Interactive Logon : Message Title for users attempting to logon (ie: The Rules)

* Interactive Logon : Message Text for users attempting to logon (ie: No Porn, No Ebay, No Zip files etc..)

GrantAGP, MCP 2000

 

[grantagp]

Also I just forgot to mention that you could also Create and link a new GPO to a specific OU containg the relevent computer accounts.

Do this if you don't want the message to be applied accross the whole domain. (the way to set it in the GPO is still the same)


GrantAGP, MCP 2000

 

[markdmac]

Depending on how long you want the message to be, you can either go with the above setting which displays the legal text banner or you can also modify the login banner itself which I prefer since it does not require the extra click to get to the login box.

I wrote a script to set this. You can change my text within the script to suite your needs.

Note that the part in red should be one long line of text.

You can add this as a machine startup script within a GPO to roll out to all workstations.

'==========================================================================
'
' NAME: SetLogonPrompt.vbs
'
' AUTHOR: Mark D. MacLachlan , The Spider's Parlor
' URL: [URL unfurl="true"]http://www.TheSpidersParlor.com[/URL]
' COPYRIGHT (c) 2005 All Rights Reserved
' DATE  : 4/25/2006
'
' COMMENT: 
'
'==========================================================================

On Error Resume Next
 
Dim Path
Set WSHShell = Wscript.CreateObject("WScript.Shell")
Path= "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"[red]
WSHShell.RegWrite path & "LogonPrompt","Stop! This system processes electronic mail classified as Private under the Electronics Communications and Privacy act of 1986.  Law enforcement officers please take note that special warrants may be required to access this system.","REG_SZ"[/red]
If err then
	msgbox "Error Encountered"
Else
	msgbox "Logon Prompt Setup Sucessful"
End if

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[lovalles]

grantagp

I have follow the steps also applied gpupdate /force on all client.
Also restarted all clients.
The message is not displayed?
What could be wrong?

 

[markdmac]

I have follow the steps

Please be more specific. What have you done? Have you verified that the policy is enabled? Have you checked the security settings? Have you tried using GPRESULT at a workstation to see if it sees the GPO?

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[lovalles]

grantagp
Everthing worked fine the problem its a must to apply
* Interactive Logon : Message Title for users attempting to logon (ie: The Rules)

in order to
Interactive Logon : Message Text for users attempting to logon

to work
thanks!!

 

[markdmac]

You ignored most of my questions:

Have you verified that the policy is enabled? Have you checked the security settings? Have you tried using GPRESULT at a workstation to see if it sees the GPO?

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[lovalles]

Yes is working