Windows lock screen messages—also known as legal notices or interactive logon messages—are commonly used in business environments to display security or compliance warnings before sign-in.
However, these messages can become unnecessary, confusing, or disruptive, especially if they were enabled by mistake or through automated policies.
This guide explains how to disable the Windows lock screen message using Group Policy, Registry Editor, Intune, and Domain GPO, covering both Windows 10 and Windows 11.
What Is the Windows Lock Screen Message?
The lock screen message appears before a user signs in and is typically configured using:
- Group Policy
- Registry settings
- Microsoft Intune
- Active Directory Domain GPO
It is controlled by two settings:
- Message title for users attempting to log on
- Message text for users attempting to log on
Method 1: Disable Lock Screen Message Using Group Policy
Best for: Standalone or locally managed PCs
Steps:
- Press Win + R, type
gpedit.msc, press Enter - Navigate to:
Computer Configuration → Administrative Templates → System - Set the following policies to Not Configured:
- Interactive logon: Message title for users attempting to log on
- Interactive logon: Message text for users attempting to log on
- Run:
gpupdate /force - Restart or sign out
✅ The lock screen message will be removed.
Method 2: Disable Lock Screen Message via Registry (Most Common)
Best for: Scripts, automation, Intune remediation
Registry Path:
Registry Values to Remove:
LegalNoticeCaptionLegalNoticeText
PowerShell Command (Run as Administrator):
🔁 Restart or sign out to apply changes.
Method 3: Disable Lock Screen Message Using Microsoft Intune
Best for: Intune-managed devices
Steps:
- Go to Microsoft Intune Admin Center
- Navigate to:
Devices → Configuration profiles - Check for profiles using:
- Settings Catalog
- Device Restrictions
- Custom OMA-URI
- Search for:
- Interactive logon
- Legal notice
- Clear or remove:
- Logon message title
- Logon message text
- Sync the device or wait for next check-in
⚠️ Local changes will not persist if Intune enforces the policy.
Method 4: Disable via Domain Group Policy (Active Directory)
Best for: Domain-joined computers
If the device is joined to a domain, local registry or GPO changes will be overwritten.
Steps:
- Open Group Policy Management Console
- Edit the applicable Computer GPO
- Go to:
Computer Configuration → Policies → Windows Settings → Security Settings → Local Policies → Security Options - Set these to Not Defined:
- Interactive logon: Message title
- Interactive logon: Message text
- Run:
gpupdate /force
How to Identify What’s Setting the Lock Screen Message
Check applied policies:
gpresult /r
View Resultant Set of Policy:
rsop.msc
Registry validation:
Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System"
📌 Common Issues & Notes
- Intune or Domain GPO overrides local changes
- Message may reappear after reboot if managed centrally
- Security Defaults in Entra ID do not control lock screen messages
🧾 Summary
| Environment | Correct Fix |
|---|---|
| Standalone PC | Local GPO or Registry |
| Intune-managed | Remove Intune profile |
| Domain-joined | Update Domain GPO |
🚀 Final Thoughts
Removing unnecessary lock screen messages improves user experience while maintaining system clarity. Always verify where the policy is coming from before making changes—especially in managed environments.
If you manage devices via Intune or Active Directory, central policy updates are the only permanent fix.




