CIS Microsoft Windows 10 Enterprise RTM (Release 1507) Benchmark

2.3.7.5 (L1) Configure 'Interactive logon: Message text for users
attempting to log on' (Scored)
Profile Applicability:
Level 1
Level 1 + BitLocker
Description:
This policy setting specifies a text message that displays to users when they log on. Set the
following group policy to a value that is consistent with the security and operational
requirements of your organization.
Rationale:
Displaying a warning message before logon may help prevent an attack by warning the
attacker about the consequences of their misconduct before it happens. It may also help to
reinforce corporate policy by notifying employees of the appropriate policy during the
logon process. This text is often used for legal reasons—for example, to warn users about
the ramifications of misusing company information or to warn them that their actions may
be audited.
Note: Any warning that you display should first be approved by your organization's legal
and human resources representatives.
Audit:
Navigate to the UI Path articulated in the Remediation section and confirm it is set as
prescribed. This group policy setting is backed by the following registry location:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System:LegalNoti
ceText
Remediation:
To establish the recommended configuration via GP, configure the following UI path to a
value that is consistent with the security and operational requirements of your
organization:
Computer Configuration\Policies\Windows Settings\Security Settings\Local
Policies\Security Options\Interactive logon: Message text for users attempting to log
on
160 | P a g e