60 pts.
 Interactive Logon: Message Text… Global Policy
Hi Guys,

I have a  Windows 2k3 domain environment, using an XP PRo system, we have many global policies, one of which provides the logon settings - these include an interactive message to say something along the lines of "Don't log on unless your allowed..."

I am currently working on a project to get several PCs to log onto the network without having to actually log on, so that it is fully automatic - the reason for this is we are developing something where someone can swipe a card to bring up relevant information, however they need a domain account for this.

I have managed to get the computer to automatically log in with the correct credentials through a registry tweak, however I am stuck with the Interactive Logon Message text - set in global policy for all computers in the domain.

Is there anyway to prevent this from being passed to certain PC's whilst retaining other settings within that policy, or is there a way to get it to press the OK after a period of time?

Any help would be great.

Paul Beynon



Software/Hardware used:
Windows XP, Windows Server 2003
ASKED: October 12, 2009  1:54 PM
UPDATED: May 4, 2010  1:56 PM

Answer Wiki:
my suggestion would be to create a different OU and move the lesser of the systems to it and then setup your group policy for it. Obviously you'll need to remove it the policy from the all computers in the domain policy.
Last Wiki Answer Submitted:  October 12, 2009  5:05 pm  by  Moto   460 pts.
All Answer Wiki Contributors:  Moto   460 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

“Is there anyway to prevent this from being passed to certain PC’s whilst retaining other settings within that policy, or is there a way to get it to press the OK after a period of time?”

1. Create another policy (from scratch) that has both the Interactive logon: Message text for users attempting to log on and Interactive logon: Message title for users attempting to log on, enabled but blank.

2. In the scope of this negation policy, set the Security Filtering to include only the computer hostnames you want to have the negation policy applied to.

3. Apply this negation policy to the OU where the computers reside.

The effect is that the Logon warning policy is applied to the OU but then the negation policy overrides this setting only for the specified computers. NOTE: This will only work if your existing policy that sets the logon message is not set to “enforced”. If this is the case it will override the negation policy.

 10 pts.