Solved

Interactive logon text spontaneously changed...

Posted on 2004-03-27
7
1,068 Views
Last Modified: 2012-08-13
Alright, this is a puzzler for me.  I was working on some new software restriction policies (in group policies) when I logged off and logged back on to test the new settings.  Suddenly, after one such logon, I noticed that the Acceptable Use Policy (which I displayed in the Interactive logon text in group policy), was cut off at about one-third of the original length of the text...effectively cutting off 2/3 of my policy statement.  I went in to retype the policy, clicked apply, then when I re-view the policy, it reverts back to the text at 1/3 of the text I entered, as though there were a character limit.

This policy has been working fine for over a year...I recently added 2003 to the network, but that was over a month ago and everything worked fine up until now.  The only changes I made in the past two days was the implementation of a software restrcition policy (which I removed to try and troubleshoot this) and I also added the Group Policy Management Console snap-in to my 2003 server.  I also removed that, in an effort to troubleshoot this error to no avail.  It displays the whole text box, as if I typed in something massive, but will not exceed displaying a certain amount of characters anymore.

What is going on???

James

(P.S. This is not critical, but I am attaching 500 points because I have a feeling this is a tough one).
0
Comment
Question by:jamesreddy
  • 4
  • 3
7 Comments
 
LVL 11

Accepted Solution

by:
kabaam earned 500 total points
Comment Utility
Hi jamesreddy,
I just found this MS article.  It says it must be made on a 2k machine to use on 2k machines.  Try on one of the 2k servers you still have.
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/577.mspx

happy trails
Chad
0
 
LVL 9

Author Comment

by:jamesreddy
Comment Utility
I'll try to create it on one of my older Wind2K servers, BUT...as a matter of record, all of my network machines are Windows XP Professional.  We have no 2000 machines left.
0
 
LVL 9

Author Comment

by:jamesreddy
Comment Utility
Just tried and get the same result.  However, reading your post made me do a character count on that post.  It is, indeed, stopping at 512 characters.

Here is the odd thing....For the past year, I have had only Windows 2000 Servers, and a mix of XP and 2000 machines (now we're all XP), but...I've been exceeding the 512 character limit on every machine the entire time up until yesterday.
0
Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

 
LVL 11

Expert Comment

by:kabaam
Comment Utility
that's odd, and there hasn't been any changes to the network or DC since (besides listed)
XP and 2k3 should support upt 4,000 characters.
When you go into group policy, does it still display the full text contents?
How about the registry?

http://support.microsoft.com/default.aspx?scid=kb;EN-US;310430
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
0
 
LVL 9

Author Comment

by:jamesreddy
Comment Utility
No.  When I went into group policy (on the 2003 server) is only displayed the first 512 characters.  This has never occured before.  When I typed in the remainder of the policy, apply and ok it, then go back into it, it was there.  However, if I closed the Group Policy Management console, then went back into the Interactive Logon text, my information was cut back to 512 characters again.

Wierd, huh?

On the upside, you turned me on to an idea that solved the problem.  My original message was imported from the 2000 domain controllers, and as such it was created originally on the 2000 controllers.  Simply copying and pasting the message as before did not solve the problem....and retyping it did not solve the problem.  BUT...upon reading your first article you posted, I found out that the 2003/XP Interactive logons now support carriage returns.  So...I retyped the policy and MANUALLY used the carriage returns rather than continually typing as I did before.  When I manually hit ENTER at the end of every line in my policy statement, and apply the policy, the entire message now shows up on the policy and the computers.

Ever heard of having to manually put in carriage returns before?  In any event, it worked.  Since it is your fault I stumbled on the solution and I can't split point with myself (LOL), I'm going to give you the point for this one kabaam!  :)

Thanks bud!

James
0
 
LVL 11

Expert Comment

by:kabaam
Comment Utility
woohoo.
that's cool James,
good to hear it's working.  Just a note though... do your users actually read the entire message before logging on?  That is a lot of text to easily bypass by hitting the ok button and moving on.
We had a lengthy one on our network and NOBODY ever read it.  I don't even know what it said.

happy trails
Chad
0
 
LVL 9

Author Comment

by:jamesreddy
Comment Utility
I suppose not, but the point of the message is to provide us with the legal means to suspend or expel students that violate policy.  The AUP states that by clicking OK, you agree to these terms and conditions and that alone, has held up in court for other companies.  :)

Best I can do for the time being.  I have an implementation that will be going on the computers in the next few weeks that displays an acceptable use policy as soon as they log in and provides two choices:

1. "I agree to abide by the terms of the Acceptable Use Policy"
 
or

2.  "I do not agree to abide by the terms of the Acceptable Use Policy"

When they click number 2...it displays a message stating they are not permitted to use the system and to see the system administrator.  The cannot get past the AUP on this new program until they agree to it.  Further, the program monitors every single keystroke entered onto the system and uploads it to a server log every night.  So it is more of a legal notice that they may be monitored and everything they do is recorded for security purposes.

Pretty sad I have to resort to this extreme, but these student sbring too much crap into the school and it affects the other students who genuinely try to work effectively.

James
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now