Acceptable Use Policy

Have you ever wanted to exert more control over how users operate your Windows 95 and Windows 98 computers? Have you ever wanted to make it perfectly clear to anyone who uses your computer or even a number of computers, exactly how you expected them to be used? Have you ever wanted to control who logs on to one of your computers and who doesn't without spending thousands of dollars for special programming? Have you ever wanted to bar an errant user from logging on because they used the computer in a manner that violated established policies and practices?

If you have answered yes to one or more of these questions, the AUP logon program is for you!

Released: May 2000
Version 1.1
New Release

For: Windows 95, 98

What is it?

AUP is an acceptable usage policy logon program.

What does that mean?

This means that when a user logs on they see the acceptable usage policy that has been established by you or your company and have to click either 'I Accept' or 'I Decline'. If the accept the AUP they can use the computer, if the decline they are logged off automatically.

AUP also has it's own built in scripting, which means that you can have it launch programs and display messages after the user has accepted the AUP. In addition, AUP also has the ability to prevent someone from completely logging on, so that they can not use the computer, but can see the AUP.

What is AUP for?

AUP (Acceptable Usage Policy) is designed for use on a computer network, such as a small office network or school network. It can also be used on small home and home business networks to give children an idea of what is and what is not acceptable. When run, the program displays an acceptable usage policy and asks the user to agree to it. If the user does not agree then they are logged off. When they accept, a script is run to load programs, display messages, etc.

What is the scripting used for?

The scripting in AUP tells the program:

A. Where to find the acceptable usage policy.
B. Whether to prevent the user from logging on.
C. What programs to run when the policy is accepted.
D. What messages to display etc.
E. It is the only way a network administrator can communicate with the program.

How do I use the scripting?

Scripting is easy to use! You just create a text file with the extension '.spt' and then run the program from a shortcut with the command "c:\aup\aup.exe script.spt", where "c:\aup\aup.exe" is the path of the program, and "script.spt" is the name of the script file to use.

Once you have the program accessing the script file you need to put commands into the file. To do this you need to open up the script file in a text editor (eg: notepad) and type in the commands. The syntax to use [COMMAND] 'PARAMETER1' 'PARAMETER2', where COMMAND is the command to use, and PARAMETER1, PARAMETER2 are the parameters for the command. eg: [AUP FILE] 'c:\aup\aup.txt'.

It is recommended that each command be put on a separate line. Each command must be enclosed with the square brackets [] and in capitals. Each parameter must be enclosed in single quotes '' and placed in the correct order. A list of commands is specified below.

[AUP FILE] - Specifies the AUP file to use. If you do not specify this command, no AUP will be shown.

There is one parameter the file name of the AUP file.

eg: [AUP FILE] 'c:\aup\aup.txt'

[LAUNCH PROGRAM] - Specifies a program to launch or run. There are three parameters: filename, parameters and working directory.

eg: [LAUNCH PROGRAM]   'C:\WINDOWS\EXPLORER.EXE'   '/n,/e,c:\windows'   'c:\windows'

[MESSAGE] - Specifies the text of a message to show in a message box. There is one parameter - the message. If you put in tabs and carriage returns then these will be shown in the message box.

eg: [MESSAGE] 'Hello World!
This is a multi-line message'

[LINK] - Specifies another script file to be linked in. There is one parameter, the path of the file to link. The main use of LINK is to link to an individual file for each user.

For example, when a user logs on their folder is mapped to a drive, say "n:\". You could then put a script file into their folder and put the statement "[LINK] 'n:\link.spt'" into the main script file, where n:\ is the drive or path that their folder is mapped to, and link.spt is the name of the script file. This would mean that each user could be shown a slightly different AUP, or you could stop a user from logging on by putting [DENY LOGON] into their individual script file.

eg: [LINK]   'linked.spt'

[DENY LOGON] - Specifies that the accept button is disabled. This is very powerful, so be careful. If the accept button is disabled you HAVE to click the decline button and be logged off - THERE IS NO ALTERNATIVE.

The idea of DENY LOGON is that it can be put in a linked file for a user that has demonstrated some form of errant behavior. The user will not be able to user the computer, but will still see the AUP. You can use this with DENY MESSAGE to tell them what they have violated acceptable policy.


[DENY MESSAGE] - Specifies a message that is shown, before the AUP is shown. There is one parameter, the content for the message box. See MESSAGE (above) for more details.

The method behind DENY MESSAGE is that it is used with DENY LOGON so that a user can see the AUP, but can not use the computer.

eg: [DENY MESSAGE]   'You have violated the AUP and are not allowed to use this computer.'

The scripting is limited, but the author is examining ways that it may be expanded, so if you have an idea for them, you may want to send them an email.

Why are users logged off if they press certain keys?

Users are automatically logged off if they press any of the following keys: 'ALT'   'CTRL'   'DEL'   'WIN KEY'. 

This is done for security, as it has been found that on some computers the user could press 'CTRL+ALT+DEL' and terminate AUP. The authors are looking into a better solution for this problem, and will notify users when a solution is found.

Can I display a different acceptable usage policy for each user?

One of the great features of AUP logon program is the ability to have each can see a different acceptable usage policy. To do this you need to write each policy and save them as plain text files. There are then two ways you can display different AUP's:

1: Place an AUP in each users folder, so that when a user logs on the location of the file is mapped in such away that it appears as the same file. You can then specify one AUP FILE command in the main script file.

2: Place a few AUP's in one folder, and then place a linked script file in the users folder so that it is mapped in such away that it appears as the same file. Next link this file from the main script file by the command LINK. You can then place the AUP FILE command in the linked file and specify whichever AUP you want them to see.

One note to remember though.... AUP logon program will always display the file specified by the first AUP FILE command.

Can I change the AUP that is displayed?

The AUP that is displayed is taken from a file. That file is specified by the command AUP FILE from within any script file. This means that not only can you change the contents of the AUP file, but that you can also move the file to a different location or rename it.

You can read the Readme document for the AUP Logon Program by clicking here: Readme

You can download your own copy of the AUP Logon Program by clicking this link:

Download Now!


The AUP Logon Program is a copyrighted freeware product of Lythos.UK

Copyright ©2000 DEW Associates Corporation. All rights reserved.