See how to customize the Access Denied error message on Windows 10, so that you send your own message to the user who is trying to infringe their rights.
In Windows 10, every file has a user permission and if a user who does not have access to it, then they get a denied message access. The user sees a generic error message, but this can be customized by the computer administrator. This post will guide you on how to customize the access message in Windows 10.
Customize access message in Windows 10
The standard Access Denied messages do not particularly help the user as they simply ask him to contact the administrator. Instead, Windows offers administrators, through the political team and the registry, a clearer message, with whatever information you want.
You can also give to users the ability to send an email to request access to the file or folder they were denied access to.
As an administrator, be sure to format it carefully so that the message makes sense when read by a user. Let's see how you do it change.
Customize message for denial of access via Group Policy
1. Open it program group policy editor. If you don't know how, press the Win + R keys at the same time and in the execution window that appears, type the word gpedit.msc and press the OK key.
2. In the Group Policy console, go to the path below and locate the policy “Customize message for access denial errors".
Settings > Templates managements > System > Help with access denial
3. Double-click to open and configure the following:
a. Click "On"
b. Write your message in the "Show the following messages to unauthorized users" field
c. Enable users to ask for help
d. Add your message in the "Add the following text to the end of the email" field.
e. Press the options for Email Recipients (folder holders and file server administrator)
g. Add Additional Recipients (if desired)
Email settings may also include device claims and user claims.
You can also record emails in the application and service event log.
Customize message for denial of access using Registry Editor
The same can be configured on computers through the Registry Editor. This method is practical if the computer does not have a group policy.
1. Make a Backup of the registry.
2. Open the Registry Editor, If you don't know how, press the Win + R keys at the same time and in the run window that appears type the word regedit and press the OK button.
3. Go to the following route
Computer \ HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows \ ADR \ AccessDenied
If ADR and AccessDenied do not exist, just create one.
4. Right-click in the right pane and select "Generate> DWORD Value (32-bit)" and name it as Enabled
5. Double-click to edit the Enabled value and set it to 1
Then create the following DWORD and Strings values.
AdditonalEmailTo - String value - Blank (no value)
AllowEmailRequests - Dword Price -1
EmailMessage - Multi-String Value - Your personalized message
Enabled - Price Dword - 1
ErrorMessage - Multi-String Value - Your personalized message
GenerateLog - Dword Price - 1
IncludeDeviceClaims - Price Dword - 1
IncludeUserClaims - Dword Price - 1
PutAdminOnTo - Price Dword - 1
PutDataOwnerOnTo - Price Dword - 1
Make sure you set the values according to what is displayed in the screenshot.
You can customize string details, such as email, error message, and additional emails.
An easy way to do this is to enable Group Policy on a computer. This will automatically generate the corresponding registry keys, which you can export and then import into other computers.
I hope you were able to customize your own personal access ban message.