| 加固项 | 未授权访问警告 |
|---|---|
| 适用平台 | Windows Server / Windows 10+ |
| 风险等级 | 低 |
| 基线 | LegalNoticeCaption/LegalNoticeText 已配置；DontDisplayLastUserName = 1 |
配置与核查
配置与核查
$k='HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System'
Set-ItemProperty $k -Name LegalNoticeCaption -Value "Authorized access only"
Set-ItemProperty $k -Name LegalNoticeText -Value "This system is monitored. Unauthorized access is prohibited and will be prosecuted."
Set-ItemProperty $k -Name DontDisplayLastUserName -Value 1
Get-ItemProperty $k | Select-Object LegalNoticeCaption, LegalNoticeText, DontDisplayLastUserName横幅在建立会话前展示，文案是对外公示内容：不要写主机名、系统版本、联系人等情报。