Configure Legal Notices on Domain Computers using Group Policy

In this article, we are going to show how to configure Legal Notices on domain computer by using Group Policy.

So let’s get started.

We have our domain controller, which is also our MDT server, and we have a Windows 7 Professional machine, which is added into our domain controller. We are going to go to Start menu, then right click on the Computer and then go to Properties. Here you can see the computer name, it added into domain controller as well.

basic info computer windows 7


Let’s go back to our domain controller and we can see that by default it already exists in Computers section.

active directory computers

We have to create the GPO, and it’s really simple, guys. Withing your server you want to find and locate the Group Policy Manager, so let’s open it up.

GP management

We are going to expand it and go to Domains. It is really depends on you, but we are going to drop this GPO in the root directory of our domain, but if you want to push it out to a specific directory, just go for it, it’s your computer.

So, right click and we are going to create a GPO in this domain and link it here.

create GPO domain

We have to give it a name. We are going to type LOGON BANNER. Click Ok and you will see that GPO is successfully created.

GPO new

All right guys, now you have to right click on it and go to Edit and it is going to open up the Group Policy Management Editor. You can double click on the title bar to expand the window.

Now we should go to Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> Security Options.


GPO security options

Right there we need the couple of tools. The first one is an Interactive logon: Message text for users attempting to log on. Another one is Interactive logon: Message title for users attempting to log on. We just have to enable those policies. Just click on them, enable and type the message. We are going to say “What’s up people, don’t play around when logged in.”. Well, that makes no sense, but whatever. The most likely you have a legal notice dialogue that you want your users to automatically get when they log in, just put it in here.

GPO log on message

You can see that the text has been applied.

You have to do the same things with the title. We are going to say “LEGAL NOTICE, PLEASE READ”.

This is really up to you how you want to do it in your infrastructure.

security policy settings


Now we are going to close the Policies and go to our GPO settings. We will see two settings that we just made.

GPO computer configuration

So, we actually have a machine right here, and we are going to force the GPO to it.

Just go to Start. Type CMD, run click on the icon and run it as administrator.

From here we are going to run gpupdate /force. It will update all the policies.

cmd updating policy

Once it done, exit from the command prompt and reboot your PC.

After rebooting you have to press CTRL+ALT+DELETE and you will see the following sentences:


What’s up people, don’t play around when logged in.

legal notice

Press Enter, and now you will be able to log in.

That’s how you should create a Legal notice within your domain controller using GPO. If you have any comments or questions, feel free to leave them at below in the comments section.

I enjoy technology and developing websites. Since 2012 I'm running a few of my own websites, and share useful content on gadgets, PC administration and website promotion.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.