See how you can customize the Access Denied error message in Windows 10 to send your own message to a user trying to infringe on their rights.
In Windows 10, every file has a user license and if a user does not have access to it, then they receive a denial of access message. The user sees a general error message, but this can be customized by the computer administrator. This post will guide you on how to customize your Windows 10 access message.
Customize access message in Windows 10
The standard Access Denied messages do not particularly help the user as they simply ask him to contact the administrator. Instead, Windows offers administrators, through the political team and the registry, a clearer message, with whatever information you want.
You can also enable users to send an email requesting access to a file or folder that they were not allowed access to.
As an administrator, be sure to configure it carefully so that the message makes sense when a user reads it. Let's see how you make the change.
Customize message for denial of access via Group Policy
1. Open the Group Policy Editor. If you do not know how, press Win + R at the same time and in the popup window that appears type gpedit.msc and press OK.
2. In the Group Policy console, go to the path below and locate the policy “Customize message for access denial errors".
Settings> Management Templates> System> Access Denial Help
3. Double-click to open and configure the following:
a. Click "On"
b. Write your message in the "Show the following messages to unauthorized users" field
c. Enable users to ask for help
d. Add your message in the "Add the following text to the end of the email" field.
e. Press the options for Email Recipients (folder holders and file server administrator)
g. Add Additional Recipients (if desired)
Email settings may also include device claims and user claims.
You can also record emails in the application and service event log.
Customize message for denial of access using Registry Editor
The same can be configured on computers through the Registry Editor. This method is practical if the computer does not have a group policy.
1. Make a Backup of the registry.
2. Open the Registry Editor. If you do not know how, press Win + R at the same time and in the popup window that appears, type regedit and press OK.
3. Go to the following route
\ HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows \ ADR \ AccessDenied
If ADR and AccessDenied do not exist, just create one.
4. Right-click in the right pane and select "Generate> DWORD Value (32-bit)" and name it as Enabled
5. Double-click to edit the Enabled value and set it to 1
Then create the following DWORD and Strings values.
AdditonalEmailTo - String value - Blank (no value)
AllowEmailRequests - Dword Price -1
EmailMessage - Multi-String Value - Your personalized message
Enabled - Price Dword - 1
ErrorMessage - Multi-String Value - Your personalized message
GenerateLog - Dword Price - 1
IncludeDeviceClaims - Price Dword - 1
IncludeUserClaims - Dword Price - 1
PutAdminOnTo - Price Dword - 1
PutDataOwnerOnTo - Price Dword - 1
Make sure you set the values according to what is displayed in the screenshot.
You can customize string details, such as email, error message, and additional emails.
An easy way to do this is to enable Group Policy on a computer. This will automatically generate the corresponding registry keys, which you can export and then import into other computers.
I hope you were able to customize your own personal access ban message.