asked on

Force users to use winexit.scr

Hello, I need to force users to use winexit.scr. I think that I just need to make two registry changes.

1. I need to be able to specify winexit.scr as the default screensaver for all users who log on. What is the registry key that I need to change that will do this?

2. I then need to restrict users access to the screensaver tab under Display Properties so that they cannot change to a different screensaver. What is the registry key that I need to change for this?

EDIT: These boxes are running Windows 2000 sp4. We are on an NT 4.0 domain.

oBdA

You can do that with a system policy and a customized template:

====8<----[WinExit.adm]----
CLASS USER

CATEGORY !!AdditionalSettings

CATEGORY !!Desktop

POLICY !!ScreenSaver
KEYNAME "Software\Policies\Microsoft\Windows\Control Panel\Desktop"
PART !!Activated CHECKBOX
VALUENAME "ScreenSaveActive"
VALUEON "1"
VALUEOFF "0"
END PART
PART !!Password CHECKBOX
VALUENAME "ScreenSaverISSecure"
VALUEON "1"
VALUEOFF "0"
END PART
PART !!Time TEXT END PART
PART " " NUMERIC TXTCONVERT REQUIRED
MIN 0
MAX 599940
SPIN 60
VALUENAME "ScreenSaveTimeout"
DEFAULT "900"
END PART
PART !!ScreensaverExe TEXT END PART
PART " " COMBOBOX NOSORT
VALUENAME "SCRNSAVE.EXE"
REQUIRED
DEFAULT "C:\WinNT\System32\winexit.scr"
SUGGESTIONS "C:\WinNT\System32\winexit.scr"
END SUGGESTIONS
END PART
END POLICY ; !!Screensaver

END CATEGORY ; !!Desktop

END CATEGORY ; !!AdditionalSettings

[strings]
AdditionalSettings=Additional settings
Desktop=Desktop
ScreenSaver=Screen saver
Activated=Activate screen saver
Password=Password protected
Time=Time (in seconds):
ScreensaverExe=Path and file name:
====8<----[WinExit.adm]----

Guide to MS Windows NT 4.0 Profiles and Policies
http://www.microsoft.com/technet/prodtechnol/winntas/maintain/prof_pol.mspx

You probably don't need this article; by default, a W2k machine that's a member of an NT4 domain will process the NTConfig.pol in the netlogon folder the same way an NT4 machine would do it:
Group Policies for Windows 2000 Professional Clients in Windows NT 4.0 Domain or Workgroups
http://support.microsoft.com/?kbid=274478

xy8088

ASKER

I'm not 100% sure that I understand but from quickly scanning over the provided links it looks like I would need access to the server to get that to work. Let me take a second to better explain the situation that I am in:

I only have local admin access to these machines, I have no access to the server. Also we will be changing from NT to 2003 server pretty soon. Those is the main reasons why I was just looking for a simple registry edit that can do what I need.

Is there a way to use the solution that you gave just on the local machine somehow?

ASKER CERTIFIED SOLUTION

luv2smile

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

xy8088

ASKER

Thanks luv2smile. Your solution looks good. But when I try to implement it this happens:

I have it set so that winexit.scr launches after 15 minutes of user inactivity. The problem is that after 15 minutes of user inactivity an error message pops up saying "Error encountered while creating registry key. Make sure you have Set Value and Create Subkey permissions." Then when you press "OK" the error message dissappears and winexit.scr starts.

xy8088

ASKER

Apparantly in order for non-administrators to be able to use winexit.scr, you have to add "Set Value" and "Create Subkey" permissions for the group Everyone on the registry key: HKEY_Local_Machine\Software\Microsoft\WindowsNT\CurrentVersion. Well I did that and I still get the same error message. So just for the hell of it I tried the whole thing again from scratch but instead of using winexit.scr I used logon.scr and it works fine. So for some reason winexit.scr is causing me headaches now...

xy8088

ASKER

Figured it out. The correct key that needs to be modified is:
HKEY_Local_Machine\Software\Microsoft\WindowsNT\CurrentVersion\IniFileMappings\Control.ini
And now everything is working as it should.