How to install: |
System Logon Banner Requirements |
For Unix and Mac OSX systems:Place the banner text in the /etc/motd and/or /etc/issue file displayed at system login; In addition, you may install banners using tcpwrappers for services like ftp; However, this is not required and some services (such as ssh and rsh) will not function with banners installed in this way;For Windows systems:For Windows 2000 and XP systems in the Fermi Windows 2000 domain, the banner is provided for you automatically.For Windows 2000 and XP systems NOT in the domain, get and run the utilities in pseekits\DesktopTools\Banner. For (old) NT systems, place the banner text in the WindowsNT registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\ Other systems:Banners are not required Windows 95/98 systems or other "self-managed" systems. Refer to detailed policy guidance at right. "Self-managed" systems will require banner stickers on the monitor frame.Frequently-Asked QuestionsText-only version of the banner message |
Despite the 1999 date, this is still valid. October 11, 1999 TO: All Employees and Users On June 17, 1999, the Department of Energy Chief Information Officer issued a memorandum subject: Use of Warning Banners on Departmental Computer Systems. This memorandum issued Departmental policy on the use of computer screen warning banners and is applicable to all DOE Federal and contractor organizations. The banner is to notify all computer users, prior to gaining access to the system resources, that system usage is subject to monitoring and disclosure by appropriate site, Department, or law enforcement personnel. Banners must be installed on Fermilab computers systems to appear just before or just after log-in on all systems that are managed by a system manager required to register under the Fermilab Policy on computing, explicitly including those on the Computing Protection Program Manager (CPPM) Register Managers mailing list. The wording of this banner is attached. It should be made as readable as reasonably feasible. The shape and spacing may be adjusted. The borders are not essential. Where possible, the formatting (underlines, bold, etc.) should be retained. Technical guidance on how to install banners will be provided by Mark Kaletka of the Computing Division (x2965) or on the Web. Exempt from this requirement are:
There is also a general requirement to attach a stick-on banner notice to the front of the monitor frame of all computers. The stick-on banners have been distributed to all division and section offices and the Users Office. You also may email (helpdesk@fnal.gov) or telephone (x2345) the Help Desk to obtain a stick-on banner. They also have a special micro-edition for Palm Pilots and other small devices. For your reference, the notice below is also posted on the main Fermilab web page and is to be included with all account applications forms that require signature. Any existing banners should be replaced and must conform to the one below. The Department of Energy has not made this optional. This is a requirement for all computers attached directly to the Fermilab network, whether owned by Fermilab or not. Home computers that connect through a commercial ISP are exempt, but home computers that connect directly to Fermilab by direct dial up or ISDN are not exempt. * * * * * * * * * * * NOTICE TO USERS |
For assistance contact helpdesk@fnal.gov.
Information compiled and maintained by the Computer Security Team; last modified by AH on 3/15/04.
(Address comments about page to the Computer Security Team.)