Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Interactive logon text spontaneously changed...

Posted on 2004-03-27
7
Medium Priority
?
1,092 Views
Last Modified: 2012-08-13
Alright, this is a puzzler for me.  I was working on some new software restriction policies (in group policies) when I logged off and logged back on to test the new settings.  Suddenly, after one such logon, I noticed that the Acceptable Use Policy (which I displayed in the Interactive logon text in group policy), was cut off at about one-third of the original length of the text...effectively cutting off 2/3 of my policy statement.  I went in to retype the policy, clicked apply, then when I re-view the policy, it reverts back to the text at 1/3 of the text I entered, as though there were a character limit.

This policy has been working fine for over a year...I recently added 2003 to the network, but that was over a month ago and everything worked fine up until now.  The only changes I made in the past two days was the implementation of a software restrcition policy (which I removed to try and troubleshoot this) and I also added the Group Policy Management Console snap-in to my 2003 server.  I also removed that, in an effort to troubleshoot this error to no avail.  It displays the whole text box, as if I typed in something massive, but will not exceed displaying a certain amount of characters anymore.

What is going on???

James

(P.S. This is not critical, but I am attaching 500 points because I have a feeling this is a tough one).
0
Comment
Question by:jamesreddy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 11

Accepted Solution

by:
kabaam earned 2000 total points
ID: 10695565
Hi jamesreddy,
I just found this MS article.  It says it must be made on a 2k machine to use on 2k machines.  Try on one of the 2k servers you still have.
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/577.mspx

happy trails
Chad
0
 
LVL 9

Author Comment

by:jamesreddy
ID: 10695629
I'll try to create it on one of my older Wind2K servers, BUT...as a matter of record, all of my network machines are Windows XP Professional.  We have no 2000 machines left.
0
 
LVL 9

Author Comment

by:jamesreddy
ID: 10695662
Just tried and get the same result.  However, reading your post made me do a character count on that post.  It is, indeed, stopping at 512 characters.

Here is the odd thing....For the past year, I have had only Windows 2000 Servers, and a mix of XP and 2000 machines (now we're all XP), but...I've been exceeding the 512 character limit on every machine the entire time up until yesterday.
0
Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

 
LVL 11

Expert Comment

by:kabaam
ID: 10695706
that's odd, and there hasn't been any changes to the network or DC since (besides listed)
XP and 2k3 should support upt 4,000 characters.
When you go into group policy, does it still display the full text contents?
How about the registry?

http://support.microsoft.com/default.aspx?scid=kb;EN-US;310430
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
0
 
LVL 9

Author Comment

by:jamesreddy
ID: 10695745
No.  When I went into group policy (on the 2003 server) is only displayed the first 512 characters.  This has never occured before.  When I typed in the remainder of the policy, apply and ok it, then go back into it, it was there.  However, if I closed the Group Policy Management console, then went back into the Interactive Logon text, my information was cut back to 512 characters again.

Wierd, huh?

On the upside, you turned me on to an idea that solved the problem.  My original message was imported from the 2000 domain controllers, and as such it was created originally on the 2000 controllers.  Simply copying and pasting the message as before did not solve the problem....and retyping it did not solve the problem.  BUT...upon reading your first article you posted, I found out that the 2003/XP Interactive logons now support carriage returns.  So...I retyped the policy and MANUALLY used the carriage returns rather than continually typing as I did before.  When I manually hit ENTER at the end of every line in my policy statement, and apply the policy, the entire message now shows up on the policy and the computers.

Ever heard of having to manually put in carriage returns before?  In any event, it worked.  Since it is your fault I stumbled on the solution and I can't split point with myself (LOL), I'm going to give you the point for this one kabaam!  :)

Thanks bud!

James
0
 
LVL 11

Expert Comment

by:kabaam
ID: 10695785
woohoo.
that's cool James,
good to hear it's working.  Just a note though... do your users actually read the entire message before logging on?  That is a lot of text to easily bypass by hitting the ok button and moving on.
We had a lengthy one on our network and NOBODY ever read it.  I don't even know what it said.

happy trails
Chad
0
 
LVL 9

Author Comment

by:jamesreddy
ID: 10695841
I suppose not, but the point of the message is to provide us with the legal means to suspend or expel students that violate policy.  The AUP states that by clicking OK, you agree to these terms and conditions and that alone, has held up in court for other companies.  :)

Best I can do for the time being.  I have an implementation that will be going on the computers in the next few weeks that displays an acceptable use policy as soon as they log in and provides two choices:

1. "I agree to abide by the terms of the Acceptable Use Policy"
 
or

2.  "I do not agree to abide by the terms of the Acceptable Use Policy"

When they click number 2...it displays a message stating they are not permitted to use the system and to see the system administrator.  The cannot get past the AUP on this new program until they agree to it.  Further, the program monitors every single keystroke entered onto the system and uploads it to a server log every night.  So it is more of a legal notice that they may be monitored and everything they do is recorded for security purposes.

Pretty sad I have to resort to this extreme, but these student sbring too much crap into the school and it affects the other students who genuinely try to work effectively.

James
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question