How To Configure Legal Notices On Domain Computers Using Group Policy

82872

How To Configure Legal Notices On Domain Computers Using Group Policy – Few years ago when i was working on Windows Server 2008 R2, I was told by my manager to configure a logon banner. What came to my mind was to write a script for it and run the script at logon. There are 2 ways to configure legal notices on domain computers, you can configure it by writing a script and executing it at the logon or configuring legal notice using a group policy. I believe the second method is very easy. You can configure Windows Server to display a message to users when they log on. You can use the message display functionality to personalize the logon process, provide news or information, and for other similar purposes. The message appears after the user presses CTRL+ALT+DEL and disappears after the user clicks OK.

In this post we will see on how to configure legal notices on domain computers using group policy. We will create a group policy, modify the policy settings and link it to the domain. I am configuring this policy on a domain controller running Windows server 2008 R2 SP1 edition.

Login to the domain controller machine with the administrator account. Click on Start, Click on Administrative Tools, Click on Group Policy Management. Under Domains, right click your domain and click on Create a GPO in this domain, and link it here.

How To Configure Legal Notices On Domain Computers Using Group Policy Snap 1

 

We will create a policy named Logon_Banner. Click on OK.

How To Configure Legal Notices On Domain Computers Using Group Policy Snap 2

 

Right the policy Logon_Banner and click on Edit. On Group Policy Management Editor, click on Computer Configuration, expand Policies, expand Windows Setttings, expand Security Settings, expand Local Policies, click on Security Options.

How To Configure Legal Notices On Domain Computers Using Group Policy Snap 3

On the right pane look for the policy Interactive Logon : Message text for users attempting to log on. This security setting specifies a text message that is displayed to users when they log on. You can paste the Logon text that is to be displayed to the users before they log in. Click on Apply and OK.

How To Configure Legal Notices On Domain Computers Using Group Policy Snap 4

On the right pane look for the policy Interactive Logon : Message title for users attempting to log on. This security setting allows the title to appear in the title bar of the window that contains the Interactive logon.Type the title text and click on Apply and OK.

How To Configure Legal Notices On Domain Computers Using Group Policy Snap 5

On the client computer open the command prompt and run the command gpupdate.

How To Configure Legal Notices On Domain Computers Using Group Policy Snap 6

Log off from the client computer. Hold CTRL+ALT and press DEL. You must find the logon banner. Click on OK to login to the computer.

How To Configure Legal Notices On Domain Computers Using Group Policy Snap 7

  • Brian

    I tried this, and after getting unpleasant results found this: “You can use a maximum of four lines of 512 characters each for a total of 2,048 characters in this policy, please check whether you exceed this limit.” How did you get yours to display so many characters? Thanks. -B

    • What’s the disclaimer text that you are entering ? I didn’t face any issues while i configured legal notice…

  • Samiuddin Mohammed

    Excellent Blogs, Keep up the Good Work!

    Thanks – Samiuddin

  • prasad phase

    Dear Its support on windows 2008 r2 ??

  • amit

    can we set image or animation instead of text????

  • Lee

    Hi, your site have just save me. thanks for much.

  • eowyn36

    Is there a way to modify the logon notice ? I’m trying to find a way to add a checkbox on that screen, when checked the ok button will be clickable.

    • yes, you have to modify the GP Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options –> Interactive Logon : Message text for users attempting to log on

  • eowyn36

    I did a poor job explaining myself šŸ™‚ I want to put up a agreement before logon screen.
    The only difference with the screenshot above is I want to put a checkbox there. The user will have to check it to click OK. It will say something like “I Agree to this conditions” check!
    Can I use this feature with editing it ? or there is no way to edit anything apart form the message and title ? If so can it be done with a custom script ? I’m totally clueless here. šŸ™‚

    • Now that’s little tricky.. You need to make use of script for sure..Did you search the same in google and found anything useful ?

    • TSMLRE

      Perhaps you could add a bit at the beginning saying something like “by pressing OK and continuing the logon process, you are agreeing to the following terms”

  • Myrtle

    Thank you for sharing this info. I really appreciate your
    efforts and I will be waiting for your next write ups
    thanks once again.

  • rninga

    Very useful, will definitely try it

  • Mohun Chelsea

    AS a new in IT networking in system administration field,and a having passion for windowd server system administration,recently while searching certain topics , i find u r blog,,later stage i am finding its too useful for new winds systm admns..i really appreciate ur way of doccumentations.its too easy to understand.inf future also luking for great articles.KEEP IT UP.THANKS A LOT

  • Shrikrushna BHutekar

    thank you Sir, this information is very helpful for me. thank you so much.

  • MohamedBilal Pyarejan

    pretty clear step keep it up.. prajwal..!

  • K V Naresh Kumar

    hai how to Send a quick popup message to all domain computers/users?

  • Thank you.

  • Jin Khan

    There is simple and easy way to do the same trick using registry editor.