Registry Tip #141: Logon Banner - Displaying Legal Warning Message

Hits: Failed to execute CGI : Win32 Error Code = 3


Legal notices can be set in Windows NT using the following Windows NT registry keys.

Hive: HKEY_LOCAL_MACHINE
Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon
add or modify the following values:

Name Type Value
LegalNoticeCaption REG_SZ Short Caption
LegalNoticeText REG_SZ max 255 chars
LogonPrompt REG_SZ displayed in standard logon screen
Welcome REG_SZ displayed in standard logon screen

If you want to simulate paragraphs in the Legal Notice text, enter the text with a space where the paragraph should break. Edit the value using Binary and replace the space character with 0D00 . Remember that one letter of normal text is equal to four characters in the binary editor.

Windows 2000 does not seem to use the LegalNoticeCaption or LegalNoticeText registry settings. I used the Local Security Policy console to set a legal notice, and the above registry keys were empty although Windows 2000 was displaying a legal notice and title.

This sets the local pc security policy. If the PC is part of a domain, the domain security policy value will override if it exists.

Without notice on each entry into the network (each workstation/server) via such legal notice messages, one has little chance to prosecute intruders. CIAC has published an informational article Creating Login Banners covering the issue for various platforms in some detail.

Default message in windows is delivered is Welcome. LegalNoticeCaption/LegalNoticeText create a text box displayed prior to logon which one must respond "OK" to before one can continue the logon process. LogonPrompt is displayed in the standard logon screen (this probably makes LogonPrompt less "distinct" and less useful for legal notices purposes). The logon screen variables are usually used to personalize the logon dialog such as setting the Welcome value ="Welcome to Wayne's Computer". This works in Windows NT, Windows 2000 and Windows XP.



Covers NT4 & NT2000. 3Ps covered well: policies, permissions, profiles.