[gptalk] Re: Interactive logon: Message text for users attempting to log on

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Sat, 1 Dec 2007 16:59:55 -0800

Thanks for drilling into this Jakob. Interesting stuff. You should blog it
so other folks know about it!


-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Jakob H. Heidelberg
Sent: Friday, November 30, 2007 5:49 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Interactive logon: Message text for users attempting
to log on

Wow Jamie,

I don't know why - but this really annoyed me too!!! Still does kinda, but I
do have a solution I think....

I tested my previous replies using first a Windows Vista (local policy),
then a Windows XP SP2 (local policy) - I was able to make a single "double
CRLF" - but then I noticed you mentioned the GptTmpl.inf file (indicates
domain environment), so I tried a WS2003 DC instead (a GPO at domain level).

After a couple of hours of testing (don't know what else to do, right) I
came to the conclusion that GPEDIT seems to mess up something along the way
- when talking carriage return. So, I too went for the GptTmpl.inf file
directly.

This is how I ended up doing it:
[Registry Values]
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNotic
eText=7,I don't know why this should be so hard? Jump next line please...,"
",Let's do a comma"," and continue the line...,Line number 4 is ready"," but
let's jump line 5 & 6 now...," "," ",Line 7 finishes up this story!
- see attachment "GptTmplRegistryValues.txt" if the format is messed up in
this body.

Also check out the "InteractiveLogonMsg.Jpg" attachment which is my proof of
concept (from WS 2003 DC itself).

Then I added an XP SP2 to the domain and tried it out - same good result,
see "InteractiveLogonMsgXP.Jpg".

I then tried modifying the policy setting using GPEDIT again - after
changing just a tiny bit (or hitting OK to an existing setting) within the
GPO the formatting was ruined again! Look here:
7,I don't know why this should be so hard? Jump next line please...,Let's do
a comma"," and continue the line...,Line number 4 is ready"," but let's jump
line 5 & 6 now...,Line 7 finishes up this story!
- see attachment "GptTmplRegistryValuesWrong.txt" if the format is messed up
in this body.

So, my conclusion is that GPEDIT doesn't modify the GptTmpl.inf file
properly... My best guess is it doesn't handle the quotes (") correctly.
However, you can make it work - just do the job manually, make a backup of
it and never touch the policy with GPEDIT again...

Windows Server 2008 RC1 actually seems to have the same issue in GPEDIT - so
I'll report it as a but right away (and hope it gets fixed before the
release).


Regards
/Jakob


-----Original Message-----
From: Jakob H. Heidelberg [mailto:jakob@xxxxxxxxxxxxxxx]
Sent: 30. november 2007 23:55
To: 'Jakob H. Heidelberg'; 'gptalk@xxxxxxxxxxxxx'
Subject: RE: [gptalk] Re: Interactive logon: Message text for users
attempting to log on

One thing though...

What I just wrote was tested with GPEDIT in Vista - so I figured I should
try on a Windows XP SP2 box... And it behaved differently.

However, on such a box I was able to do:

Line 1
 
 
Line 2

<space> char for each empty line... It is kinda strange.


/Jakob


-----Original Message-----
From: Jakob H. Heidelberg [mailto:jakob@xxxxxxxxxxxxxxx]
Sent: 30. november 2007 23:40
To: 'gptalk@xxxxxxxxxxxxx'
Subject: RE: [gptalk] Re: Interactive logon: Message text for users
attempting to log on

Try this:


Line 1
"
Line 2

(a single quote sign in midle)

Best regards
/Jakob H. Heidelberg

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Nelson, Jamie R Contr 72 CS/SCBAF
Sent: 30. november 2007 23:31
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Interactive logon: Message text for users attempting
to log on

Note: I also tried manually editing the GptTmpl.inf file in the GPO. A
commas represents a line break and a comma surrounded by quotes (",")
represents a comma you actually want to show up in the text. Naturally, I
placed two commas where I wanted a double-space, but that truncated the
message as well. I guess it is just not possible.

If you guys know any tricks, I'm all ears.

Regards,
Jamie Nelson

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Nelson, Jamie R Contr 72 CS/SCBAF
Sent: Friday, November 30, 2007 4:12 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Interactive logon: Message text for users attempting to
log on

Have any of you ever come across this problem?

 

When entering text via Group Policy editor (on a Windows XP workstation) for
the "Computer Configuration\Windows Settings\Security Settings\Local
Policies/Security Options\Interactive Logon\Interactive logon: Message text
for users attempting to log on" setting, I am unable to double-space
paragraphs. Single CRLFs are recognized, but when try to do two it looks
like it is going to take it, but then filters out the second CRLF as soon as
I click apply.

 

Searched the web and tried to use a suggestion someone made about using a
non-printing ASCII character (ALT+0160) after the CRLF but all it did was
truncate my message.

 

I did find a KB article located here
<http://support.microsoft.com/kb/330618>  that is somewhat related but it
says the problem should not exist in Windows XP SP2 (which is what I'm
editing the GPO on).

 

This isn't a huge deal, but it is bugging the heck out of me. Any help would
be greatly appreciated.

 

Regards,

Jamie Nelson

***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: