Comments on: Determine User Logon By Asking A Question During the Logon Process

By: biglad

biglad — Wed, 23 Nov 2005 13:04:06 +0000

Hiya,

Where i work we use some software that every 6 months makes you complete the VDU workstation test before you can login to the network, im off for the next 2 days and then its the weekend i can find out on monday the name of the software we use and let you know, as i have 2 days off and intend on getting drunk tonight i may forget email me @ biglad@mga.dnip.net to remind me

By: mrbill357

mrbill357 — Wed, 23 Nov 2005 11:33:09 +0000

We also have asimiliar banner. Just so you know, the banner is located in HKEY-LOCAL-MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogon

Create a string called LegalNoticeText and put your warning in it. Ours in pretty good, It says:

Unauthorized access is prohibited. Unauthorized access may also be a violation of other laws or policies, and may result in criminal and/or administrative penalties. Users shall not access other user’s or system files without proper authority. Absence of access controls IS NOT authorization for access! XXX information systems and related equipment are intended for communication, transmission, processing and storage of company information. These systems and equipment are subject to monitoring to ensure proper functioning, protect against improper or unauthorized use or access, and verify the presence or performance of applicable security features or procedures, and other like purposes. Such security monitoring may result in the acquisition, recording, and analysis of all data being communicated, transmitted, processed or stored in this system by a user. If security monitoring reveals evidence of possible criminal activity, such evidence may be provided to law enforcement personnel. Use of this system constitutes consent to such security monitoring.

By: tmac24

tmac24 — Wed, 23 Nov 2005 07:49:01 +0000

I agree with the above. We use a similiar banner for our students and employees. At the end of the statement we add “Clicking ok and logging onto this computer is your acceptance to the above policy.” We also have a copy of the statement in the employee and student handbook with an explanation of the terms.

By: rsg259

rsg259 — Wed, 23 Nov 2005 05:02:35 +0000

I agree that the simplest first option is to set the logon banner to say something along the lines of:

By logging on to this network you are deemed to have read and agree to comply with the Company’s policies in regard to … Anyone not abiding by these policies and requirements may be the subject of disciplinary action.
Further information can be obtained from IT Dept on ext….

We use something similar to this but I have also seen logon banners of the sort:

This computer system is the property of …. and is for authorised use only. Users (authorised or unauthorised) have no explicit or implict expectation of privacy.
Any or all uses of this system and all files on this system may be intercepted, monitored, recorded, copied, audited, inspected and disclosed to authorised officers and law enforcement agencies. By using this system the user consents to such action at the discretion of the authorised officers.
Unauthorised or improper use of this system may result in disciplinary action as well as civil and criminal proceedings. By continuing to use this system you indicate your awareness of and consent to these terms and conditions of use. LOG OFF IMMEDIATELY if you do not agree to the conditions stated in this warning.

That should catch most of the windows based OS and can be included in a script for the others.