I am trying to add a login banner for all computers I manage. I have tried the instructions on this link: https://www.jamf.com/jamf-nation/discussions/24800/login-window-banner but it still won't show up. I don't know if Catalina has changed anything to this process. Any help would be much appreciated!
We currently use it with all of our devices, Mojave and Catalina alike. My recommendation is to follow these steps:
Another step I'd add though is to make your policybanner.rftd, take a screenshot of everything in it, then make a new policybanner.rftd file to replace it with and only have the screenshot of the first one in it. Essentially, its the only way i've found to make sure that all the text and images you want to show don't get pushed off the window or need a scrollbar on all the random sized windows that everyone has at home in this world of remote workers.
In the past I had has trouble with this .rtfd file covering other notification windows and give up on it after a number of os updates wouldn't finish with out a safe mode start up to bypass this banner. Now I use a configuration profile with a Login Window payload that uses the Banner message displayed below the login prompt.
I hate policy banners. We use them in our org and while they generally work, there are times when the text is displayed improperly (say 25% of the banner appears) and other times that the Accept button is unresponsive and the user has to force a shutdown and start back up. The last issue seems to be almost exclusively with 15-inch MacBook Pros.
Whether you use a screenshot, or you create an image some other way, it does seem that the only way to have the Policy Banner display 100% reliably is to have a rtfm that only contains an image, nothing else. Personally, I have an InDesign document that I export as a png, then put that into an rtfm document, but the end result is the same as if I had used a screenshot.
Converted the banner to just a rtfd file and it displays fine but my org also wanted DUO MFA configured on all machines and this seemed to mess up the decrypting of the drive upon login. The banner would show up twice sometimes and the login would take up to 5 min which made user think that the computer was frozen. Has anyone else used policy banners and MFA together like this? If so how did you make it work? Thanks