Solved

Login banner not working

Posted on 2011-03-03
20
470 Views
Last Modified: 2012-08-13
I cannot get the logon banner to appear when users log into the network (Windws 2003 Server Active Directory).  I've defined the Interactive login message texts and title for the default domain policy in Group Policy Management.  I then ran GPUPDATE.  However, the banner still will not appear on any workstations when the user logs in.  Am I missing something?  Thanks!
0
Comment
Question by:markrkelley123
  • 11
  • 9
20 Comments
 
LVL 3

Expert Comment

by:lloydclinton
ID: 35032846
Whats OS?  Did you do gpupdate/force on the client machine?  Default update time for GP is 90 minutes..
0
 

Author Comment

by:markrkelley123
ID: 35032957
I appreciate the quick response.  Yes, I applied the /FORCE switch.  And this was about 5 hours ago.
0
 

Author Comment

by:markrkelley123
ID: 35032969
Regarding what OS, all the client machines are either Windows 7 Professional or XP Professional.
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 
LVL 3

Expert Comment

by:lloydclinton
ID: 35032970
Windows XP?  Have you checked your event viewer to make sure there hasn't been any problems with your active directory updating?
0
 

Author Comment

by:markrkelley123
ID: 35033096
Nothing in the Event Viewer that relates to this.
0
 
LVL 3

Expert Comment

by:lloydclinton
ID: 35033105
You did it like this?:

Open the GPO… expand ‘Windows Settings’, ‘Security Settings’, ‘Local Policies’, ‘Security Options’.

“Interactive Logon: Message title for users attempting to log on”.
(Place your message into this policy.)

“Interactive Logon: Message text for users attempting to log on”
(use something like “System Use Notice” for the title of the message box .)
0
 

Author Comment

by:markrkelley123
ID: 35033133
Exactly like that!
0
 

Author Comment

by:markrkelley123
ID: 35033148
In fact, when it generates the report under Settings for the Default Domain Policy my banner text and title are listed there.
0
 
LVL 3

Expert Comment

by:lloydclinton
ID: 35033163
Are other settings in your default policy working properly?
0
 
LVL 3

Expert Comment

by:lloydclinton
ID: 35033171
Also, do you have a PC that you can remove from the domain, delete the computer account from AD and rejoin it?
0
 

Author Comment

by:markrkelley123
ID: 35033246
As far as I can tell, all the other settings are working properly, although this is pretty much a vanilla setup and nothing too sophisticated exists (i.e. password lengths, etc.)  If this was the case, what would cause the GP to not work?

I was working on a separate problem earlier where I had to remove/add a PC from AD.  The banner never appeared as well.
0
 
LVL 3

Expert Comment

by:lloydclinton
ID: 35033257
How many dcs are in your domain?  are they all 2k3?  Does 1 dc hold all roles?
0
 

Author Comment

by:markrkelley123
ID: 35033323
Only one DC and it's 2k3.  And yes, the PDC holds all the roles except for DHCP.

BTW, when you right-click on a policy (there are three: Administrator GPO, Default Domain Policy, and Non Administrator) what does "Enforced" mean/does?
0
 
LVL 3

Expert Comment

by:lloydclinton
ID: 35033355
When it is enforced it can not be over ruled by other policy.
0
 
LVL 3

Expert Comment

by:lloydclinton
ID: 35033361
Can you set another policy such as the default screensaver and then make it so the users can't change it... force it and see if it takes... if it doesn't there may possibly be a problem with AD... do you have the means to install a 2nd DC?  Also are there *any* errors in the event viewer?
0
 

Author Comment

by:markrkelley123
ID: 35070950
Hi lloydclinton,

Just returned from traveling.  Will try your suggestions today.  Thanks!
0
 

Author Comment

by:markrkelley123
ID: 35071777
The latest:  Any other policy changes that I make to the Default Domain Policy do NOT take affect (i.e. Do not require CTL-ALT-DELETE, screensavers, etc.).

However, they DO take affect at the Domain Controller (fileserver) when I log in as a user or administrator.

There are NO errors reported in the Event Viewer.

Furthermore, I ran regedit and the Interactive Login text and title DO appear in:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\policies\system

I'm pretty stumped at this point....
0
 

Accepted Solution

by:
markrkelley123 earned 0 total points
ID: 35183853
To fix this problem, I ended up deleting all the existing policies (with the exception of the Default Domain Policy) and recreated them from scratch.  That seemed to work.
0
 
LVL 3

Expert Comment

by:lloydclinton
ID: 35184009
I am glad you found a solution to the problem.
0
 

Author Closing Comment

by:markrkelley123
ID: 35221263
Didn't really find answer to question.  Just had to start over.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Synchronize a new Active Directory domain with an existing Office 365 tenant
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question