Customize message for Access Denied errors

Policy ID
AccessDeniedConfiguration
Scope
Computer Configuration
Supported on
At least Windows Server 2012, Windows 8 or Windows RT
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
System › Access-Denied Assistance

Description

This policy setting specifies the message that users see when they are denied access to a file or folder. You can customize the Access Denied message to include additional text and links. You can also provide users with the ability to send an email to request access to the file or folder to which they were denied access.

If you enable this policy setting, users receive a customized Access Denied message from the file servers on which this policy setting is applied.

If you disable this policy setting, users see a standard Access Denied message that doesn't provide any of the functionality controlled by this policy setting, regardless of the file server configuration.

If you do not configure this policy setting, users see a standard Access Denied message unless the file server is configured to display the customized Access Denied message. By default, users see the standard Access Denied message.

Options

The empty box and the checked box tell the checkbox items of the Group Policy editor apart (a checked box is an item that is selected by default).

  • Display the following message to users who are denied access:
  • Enable users to request assistance
  • Add the following text to the end of the email:
  • Email recipients:
  • Folder owner
  • File server administrator
  • Additional recipients:
  • Email settings:
  • Include device claims
  • Include user claims
  • Log emails in Application and Services event log

Registry

ComputerHKEY_LOCAL_MACHINE
  • EnabledREG_DWORD
  • ErrorMessageREG_MULTI_SZ
  • AllowEmailRequestsREG_DWORD
  • EmailMessageREG_MULTI_SZ
  • PutDataOwnerOnToREG_DWORD
  • PutAdminOnToREG_DWORD
  • AdditonalEmailToREG_SZ
  • IncludeDeviceClaimsREG_DWORD
  • IncludeUserClaimsREG_DWORD
  • GenerateLogREG_DWORD

Other policies in the same category

View all policies in this category (2)