diff --git a/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.jelly b/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.jelly
index b78129798b..50f0f7b6c9 100644
--- a/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.jelly
+++ b/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.jelly
@@ -1,6 +1,9 @@
 <?jelly escape-by-default='true'?>
 <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson"
   xmlns:f="/lib/form">
+  <div class="jenkins-alert jenkins-alert-warning">
+    ${%warning}
+  </div>
   <f:entry field="allowAnonymousRead">
     <f:checkbox default="true" title="${%Allow anonymous read access}" />
   </f:entry>
diff --git a/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.properties b/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.properties
new file mode 100644
index 0000000000..11bcdb59b6
--- /dev/null
+++ b/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.properties
@@ -0,0 +1 @@
+warning=All authenticated users will be granted full administrative access. Only use this authorization strategy if all authenticated users are fully trusted.
\ No newline at end of file