REG:\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion - на кого е регистриран Windows. REG:\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon - опции при първоначално зареждане и влизане в системата. DisableCAD HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Data type Range Default value REG_DWORD 0 | 1 0 (Windows 2000 Server) 1 (Windows 2000 Professional) (See notes.) Description Determines whether users must press the CTRL+ALT+DEL security attention sequence to log on to Windows 2000. If the value of this entry is 0, the Log On to Windows dialog box is displayed as soon as the system starts. If the value of this entry is 1, the Windows 2000 splash screen with the Press Ctrl-Alt-Delete to begin message is suppressed. Value Meaning 0 Users must press CTRL+ALT+DEL to log on to the system. 1 Users need not press CTRL+ALT+DEL to log on to the system. Setting the value of this entry to 1 can compromise system security. Because only Windows responds to the CTRL+ALT+DEL security sequence, you can be assured that any passwords entered following that sequence are sent only to Windows. If you eliminate the sequence requirement, malicious programs can request and receive your Windows password. Activation method To make changes to this entry effective, you must restart Windows 2000. ========================================================================= LegalNoticeText HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Data type Range Default value REG_SZ String (Blank) Description Specifies the text in the message box that appears after a user presses CTRL+ALT+DEL to log on. If the value of this entry is not blank, a message box displaying the value of this entry appears before the Log on to Windows dialog box appears. The user must click OK in the message box to continue logging on. For example, in the figure below, the value of LegalNoticeText is "You must be an employee of XYZ to use this computer." The text in the caption (title bar) of the message box is stored in the value of the LegalNoticeCaption entry. ========================================================================= Windows NT/2K/XP and Windows 95/98/ME Login Banners =================================================== The Windows 95/98/ME/NT/2K/XP operating systems allow a login with a username and password before the system can be used. The following method causes a dialog box with the warning banner and an OK button to be displayed before the system displays the login dialog box on Windows 95/98/ME and after pressing Ctrl-Alt-Del on Windows NT/2K/XP. To create a login banner on these Windows systems you must add two keys to the Windows registry. There are two ways to edit the registry. One is to edit it directly; the second is to create a .reg file containing the required changes and to execute the file with regedit. The following registry key and values set the local login banner. Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon Values: LegalNoticeCaption = "The caption text." LegalNoticeText = "The body of the banner." Starting with Windows 2000, there is a second registry key and values associated with Login banners. These keys are set with active directory. If these active directory local policy values are defined, they take precedence over the local settings in the WinLogon key above. Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system Values: LegalNoticeCaption = "The local policy caption text." LegalNoticeText = "The local policy body of the banner." Perform these steps to create a login banner on Windows systems. For Windows 95/98/ME substitute Windows for Windows NT in the registry keys below. For Windows NT 3.51, shorten the original banner slightly by changing the words "United States" in the first line of the banner to "U. S." If you are using Active Directory, set the banner values there instead of setting them locally. 1. Use regedit or regedit32 to edit the Windows registry. 2. To set the login banner caption, create the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\ CurrentVersion\Winlogon\LegalNoticeCaption 2.1 Using regedit, scroll down to the Winlogon key. 2.2 With the Winlogon key selected choose the Edit, New, String Value command. 2.3 Type the name of the new string value as: LegalNoticeCaption and press Enter. 2.4 With the new string value selected, choose the Edit, Modify command. 2.5 In the dialog box that is displayed, type: NOTICE TO USERS and press Enter. 3. To set the banner text, create the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\ CurrentVersion\Winlogon\LegalNoticeText 3.1 With the Winlogon key selected choose the Edit, New, String Value command. 3.2 Type the name of the new string value as: LegalNoticeText and press Enter. 3.3 With the new string value selected, choose the Edit, Modify command. 3.4 In the dialog box that is displayed, type the body of the legal notice and press Enter. Note that the notice appears as a single paragraph because you can not type returns in the regedit key editor. This banner appears as a dialog box just before the system displays the login dialog box. After editing the key with RegEdit, you can save the entries as a .reg file (a copy is available from the CIAC web site (95/98/ME, NT/2K/XP, NT 3.51). To create the file, select the two keys you just created and choose the Registry, Export Registry File command, give the file a name and click Save. Edit this .reg file with a text editor and remove all the keys but "LegalNoticeCaption" and "LegalNoticeText". You can copy this .reg file to other machines and simply double clicking it makes the same edits to the registries of the other machines. If you have created a Widows NT/2K/XP .reg file, you can convert it to a Windows 95/98/ME .reg file by editing it with a text editor and changing "Windows NT" in the two keys to "Windows" and saving the file with a different name. You can also convert the Windows NT banner to a Windows NT 3.51 banner by shortening the banner text slightly. Replace the words "United States" in the first line of the banner text to "U. S." and save the .reg file with a different name. You can edit these keys with RegEdit, RegEdit32 or the system policy editor (poledit.exe). A difficulty is your inability to type a return in these editors, which causes the body of the warning to be a single paragraph. If you are so inclined, you can edit the key with RegEdit32 in binary mode and insert a 0D wherever you want a return to appear. The easiest way to do this is to edit the key in text mode and insert a ~ (7E Hex.) wherever you want a new paragraph to start (use ~~ to create a new paragraph and space it down one line). Open the key again in binary mode and replace each 7E with 0D (Return). A difficulty with a key created in this way is that it cannot be saved in a .reg file and copied from machine to machine. You must edit each machine's registry separately with RegEdit32. The hex version of the "LegalNoticeText" key is available on the CIAC server. This hex mode key contains two Returns at the end of each paragraph and can be copied and pasted into the RegEdit32 binary editor window. Also available for Windows NT is the regini.exe program in the Windows NT Resource Kit. This program edits registry entries from a file and allows the insertion of Returns in the file and in the key. Note: Don't forget to have different .reg files for Windows 95/98/ME, Windows NT 3.51, and Windows NT/2K/XP. This is related to the substitution of Windows for Windows NT in the editing instructions above and for a slightly shortened banner for Windows NT 3.51. ======================= Windows 2000 does not seem to use the LegalNoticeCaption or LegalNoticeText registry settings. I used the Local Security Policy console to set a legal notice, and the above registry keys were empty although Windows 2000 was displaying a legal notice and title. Click Start/Settings/Control Panel Double-click Administrative Tools / Local Security Settings / Local Policies / Security Options Set Message text for users attempting to log on Set Message title for users attempting to log on Logoff/Logon to test This sets the local pc security policy. If the PC is part of a domain, the domain security policy value will override if it exists.