Detections
Analytics

2.3.7.5 Configure 'Interactive logon: Message title for users attempting to log on'

Information

This policy setting specifies the text displayed in the title bar of the window that is displayed to users when they log on to the system. Configure this setting in a manner that is consistent with the security and operational requirements of the organization.

Displaying a warning message before logon may help prevent malicious logins by a threat actor warning of the consequences of their misconduct.

It also helps to reinforce corporate policy by notifying employees of the appropriate policy during the logon process. This text is often used for legal reasons, for example, to warn users about the ramifications of misusing company information or to warn them that their actions may be audited.

Note: Any warning that is displayed should first be approved by the organization's legal and human resources representative.

Solution

To establish the recommended configuration via GP, configure the following UI path to a value that is consistent with the security and operational requirements of your organization:

Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Interactive logon: Message title for users attempting to log on

Impact:

Users will have to acknowledge a dialog box with the configured title before they can log on to the computer.

See Also

https://workbench.cisecurity.org/benchmarks/25733

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-8

Plugin: Windows

Control ID: a46f3018f716745c3fd140efe682244589964a06437354d0dfca4736abe68f7c