Registry Tip #141: Logon Banner - Displaying Legal Warning Message |
Hits: Failed to execute CGI : Win32 Error Code = 3
|
Hive: HKEY_LOCAL_MACHINE
Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon
add or modify the following values:
Name | Type | Value |
LegalNoticeCaption | REG_SZ | Short Caption |
LegalNoticeText | REG_SZ | max 255 chars |
LogonPrompt | REG_SZ | displayed in standard logon screen |
Welcome | REG_SZ | displayed in standard logon screen |
Windows 2000 does not seem to use the LegalNoticeCaption or LegalNoticeText registry settings. I used the Local Security Policy console to set a legal notice, and the above registry keys were empty although Windows 2000 was displaying a legal notice and title.
Without notice on each entry into the network (each workstation/server) via such legal notice messages, one has little chance to prosecute intruders. CIAC has published an informational article Creating Login Banners covering the issue for various platforms in some detail.
Default message in windows is delivered is Welcome. LegalNoticeCaption/LegalNoticeText create a text box displayed prior to logon which one must respond "OK" to before one can continue the logon process. LogonPrompt is displayed in the standard logon screen (this probably makes LogonPrompt less "distinct" and less useful for legal notices purposes). The logon screen variables are usually used to personalize the logon dialog such as setting the Welcome value ="Welcome to Wayne's Computer". This works in Windows NT, Windows 2000 and Windows XP.
Covers NT4 & NT2000. 3Ps covered well: policies, permissions, profiles.