Interactive Logon Group Policy Object

In my view logon banner is important to send notification/company policy or any warning message to the users. in this article you will understand how to create Logon banner in active directory and how to apply to the users/computers to let them update with terms and conditions of the organization.

To create login banner you need to follow to step by step process and you will understand how to make this work possible.

Create a group policy object under “Group Policy Object section” or the OU where you wish to apply that policy. Here we will be using Group Policy Object section to create GPO for the logon Policy.

Open Group Policy Editor -> Expand the options -> Group Policy Objects -> Right click on Group Policy object click on New -> Give the name and click OK

Right click on created GPO ( In this example: Interactive Logon ) -> Edit -> Computer configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> Double click on “Interactive Logon: Message text for users attempting to log on” -> Enable option ” Define this policy setting in the template” and input your text . After setting up these settings click on Apply and OK.

In the above GPO you have just wrote your message section in the body . to setup the message tittle you need to enable and setup option (Interactive Logon: Message title attempting to logon)

To setup message title double click on “Interactive logon: Message title for users attempting to logon” -> check Define this policy setting and i wrote there “Warning!!” -> click Apply and OK

close this editor.

Your policy is ready to appy.

to apply the GPO, click the OU where you computer are, right click and click on link an existing GPO, Choose your GPO and click OK.

In Active directory : wait few minutes to apply the gpo or run below command

gpupdate 

In client computer: wait few minutes to apply the gpo or run below command

gpupdate /force

to check if the Group Policy has been applied or not run the below command on your computer with privileged user.

gpresult /r /scope computer

Conclusion:
In the article, you had learn how to create Interactive Logon Banner and apply it. You might be interested on how to Audit Kerberos service ticket operations which helps security person to track activity between the user and domain controller.