Customize message for Access Denied errors

This policy setting specifies the message that users see when they are denied access to a file or folder. You can customize the Access Denied message to include additional text and links. You can also provide users with the ability to send an email to request access to the file or folder to which they were denied access.

If you enable this policy setting, users receive a customized Access Denied message from the file servers on which this policy setting is applied.

If you disable this policy setting, users see a standard Access Denied message that doesn't provide any of the functionality controlled by this policy setting, regardless of the file server configuration.

If you do not configure this policy setting, users see a standard Access Denied message unless the file server is configured to display the customized Access Denied message. By default, users see the standard Access Denied message.

Display the following message to users who are denied access:

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied
Value Name	ErrorMessage
Value Type	REG_MULTI_SZ
Default Value

Enable users to request assistance

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied
Value Name	AllowEmailRequests
Value Type	REG_DWORD
Default Value	0
True Value	1
False Value	0

Add the following text to the end of the email:

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied
Value Name	EmailMessage
Value Type	REG_MULTI_SZ
Default Value

Email recipients:

Folder owner

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied
Value Name	PutDataOwnerOnTo
Value Type	REG_DWORD
Default Value	1
True Value	1
False Value	0

File server administrator

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied
Value Name	PutAdminOnTo
Value Type	REG_DWORD
Default Value	1
True Value	1
False Value	0

Additional recipients:

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied
Value Name	AdditonalEmailTo
Value Type	REG_SZ
Default Value

Email settings:

Include device claims

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied
Value Name	IncludeDeviceClaims
Value Type	REG_DWORD
Default Value	1
True Value	1
False Value	0

Include user claims

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied
Value Name	IncludeUserClaims
Value Type	REG_DWORD
Default Value	1
True Value	1
False Value	0

Log emails in Application and Services event log

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied
Value Name	GenerateLog
Value Type	REG_DWORD
Default Value	1
True Value	1
False Value	0