| Author | Messages | |
jfvanmeter
Posts:19
 | | 03/18/2009 7:06 AM |
| Good Morning everyone, currently I have the Interactive Logon Message (Logon Banner), defined in serveral GPOs. I would like to remove all of the settings and only define it in the Domain GPO.
Does anyone know of any issues, with the I Interactive Logon Message (Logon Banner) displaying encorrectly on Win2k, Win2k3, XP, Vista, Win2k8? The setting would only be edited via GPMC running on a Win2k3 R2 SP2 server.
Thank you in advance
Take Care //John
Subscriber Help: http://www.gpoguy.org/Subscribers-FAQ.aspx
List Info: http://www.gpoguy.com/GPTalk-Mailing-List.aspx
List archive (on-site): http://www.gpoguy.com/GPTalk-Mailing-List.aspx#archive
List archive (off-site): http://www.freelists.org/archives/gptalk
| | | |
| jeromelcruz
Posts:120
| | 03/18/2009 11:06 AM |
| John,
Here is some data I put together back on 2005. See the "caution' section for issues we ran into (issues with ‘message length and carriage returns on W2K devices when the GPO was created on Windows XP device). WARNING: Please test in your environment. Updates to the Windows 2000 OS that occurred 'after' I put this info together may have changed the results.
Here are the corresponding GPO registry keys. If values exist in both locations, the system uses these (once in the registry, I have noticed that no reboot is necessary to make them effective).
==================================================================
Computer Configuration\Windows Settings\Local Policies\Security Options
==================================================================
Interactive logon: Message title for users attempting to logon
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption
Allows the specification of a title to appear in the title bar of the window that contains the Interactive logon: Message text for users attempting to log on.
==================================================================
Interactive logon: Message text for users attempting to logon
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText
Specifies a text message that is displayed to users when they log on. This text is often used for legal reasons, for example, to warn users about the ramifications of misusing company information or to warn them that their actions may be audited.
Caution:
Windows XP Professional adds support for configuring logon banners that can exceed 512 characters in length and that can also contain carriage-return line-feed sequences. However, Windows 2000 clients cannot “interpret and display” the message text that is created by Windows XP Professional computers. You must use a Windows 2000 computer to create a logon message policy that applies to Windows 2000 computers. If you inadvertently create a logon message policy using a Windows XP Professional computer, and you discover that it does not display properly on Windows 2000 computers, do the following:
• Undefine the setting.
• Redefine the setting using a Windows 2000 computer.
Simply changing a Windows XP Professional-defined logon message policy using a Windows 2000 computer does not work. The setting must be undefined first.
Jerry Cruz | Group Policies Product Manager | Boeing IT
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of xxxxxxxxxxxxxxxx
Sent: Wednesday, March 18, 2009 4:00 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk]
Good Morning everyone, currently I have the Interactive Logon Message (Logon Banner), defined in serveral GPOs. I would like to remove all of the settings and only define it in the Domain GPO.
Does anyone know of any issues, with the I Interactive Logon Message (Logon Banner) displaying encorrectly on Win2k, Win2k3, XP, Vista, Win2k8? The setting would only be edited via GPMC running on a Win2k3 R2 SP2 server.
Thank you in advance
Take Care //John
Subscriber Help: http://www.gpoguy.org/Subscribers-FAQ.aspx
List Info: http://www.gpoguy.com/GPTalk-Mailing-List.aspx
List archive (on-site): http://www.gpoguy.com/GPTalk-Mailing-List.aspx#archive
List archive (off-site): http://www.freelists.org/archives/gptalk
| | | |
| jfvanmeter
Posts:19
| | 03/18/2009 12:31 PM |
|
Thanks Jerome, I had that problem on my current client site, I also found that windows 2000 saw , as CRLF so I had to put them in "," . I had other strange formatting issues were I would have to put 10 spaces at specific spots to get the lines to look correct.
I know that once I moved GPMC off of a xp workstation and onto a win2k3 server the formating issues seamed to go away.
Take Care //john
----- Original Message -----
From: "Jerome L Cruz" <xxxxxxxxxxxxxxxx>
To: xxxxxxxxxxxxxxxx
Sent: Wednesday, March 18, 2009 11:01:26 AM GMT -05:00 US/Canada Eastern
Subject: RE: [gptalk]
John,
Here is some data I put together back on 2005. See the "caution' section for issues we ran into (issues with ‘message length and carriage returns on W2K devices when the GPO was created on Windows XP device). WARNING: Please test in your environment. Updates to the Windows 2000 OS that occurred 'after' I put this info together may have changed the results.
Here are the corresponding GPO registry keys. If values exist in both locations, the system uses these (once in the registry, I have noticed that no reboot is necessary to make them effective).
==================================================================
Computer Configuration\Windows Settings\Local Policies\Security Options
==================================================================
Interactive logon: Message title for users attempting to logon
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption
Allows the specification of a title to appear in the title bar of the window that contains the Interactive logon: Message text for users attempting to log on.
==================================================================
Interactive logon: Message text for users attempting to logon
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText
Specifies a text message that is displayed to users when they log on. This text is often used for legal reasons, for example, to warn users about the ramifications of misusing company information or to warn them that their actions may be audited.
Caution:
Windows XP Professional adds support for configuring logon banners that can exceed 512 characters in length and that can also contain carriage-return line-feed sequences. However, Windows 2000 clients cannot “interpret and display” the message text that is created by Windows XP Professional computers. You must use a Windows 2000 computer to create a logon message policy that applies to Windows 2000 computers. If you inadvertently create a logon message policy using a Windows XP Professional computer, and you discover that it does not display properly on Windows 2000 computers, do the following:
• Undefine the setting.
• Redefine the setting using a Windows 2000 computer.
Simply changing a Windows XP Professional-defined logon message policy using a Windows 2000 computer does not work. The setting must be undefined first.
Jerry Cruz | Group Policies Product Manager | Boeing IT
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of xxxxxxxxxxxxxxxx
Sent: Wednesday, March 18, 2009 4:00 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk]
Good Morning everyone, currently I have the Interactive Logon Message (Logon Banner), defined in serveral GPOs. I would like to remove all of the settings and only define it in the Domain GPO.
Does anyone know of any issues, with the I Interactive Logon Message (Logon Banner) displaying encorrectly on Win2k, Win2k3, XP, Vista, Win2k8? The setting would only be edited via GPMC running on a Win2k3 R2 SP2 server.
Thank you in advance
Take Care //John
Subscriber Help: http://www.gpoguy.org/Subscribers-FAQ.aspx
List Info: http://www.gpoguy.com/GPTalk-Mailing-List.aspx
List archive (on-site): http://www.gpoguy.com/GPTalk-Mailing-List.aspx#archive
List archive (off-site): http://www.freelists.org/archives/gptalk
Subscriber Help: http://www.gpoguy.org/Subscribers-FAQ.aspx
List Info: http://www.gpoguy.com/GPTalk-Mailing-List.aspx
List archive (on-site): http://www.gpoguy.com/GPTalk-Mailing-List.aspx#archive
List archive (off-site): http://www.freelists.org/archives/gptalk
| | | |
|
|