Solved

Don't allow screensaver or background changes

Posted on 2003-11-20
3
2,338 Views
Last Modified: 2008-02-26
We are a school.  Our XP stations have 2 logins, teacher or Student.  We want to disallow students from changing the background or screensavers (they do cute things like "start screensaver in 1 minute" or make strange messages for a screensaver).

I looked at the local policies and didn't see it.  Is there a way?

Thanks.
0
Comment
Question by:dougp23
3 Comments
 
LVL 57

Expert Comment

by:Pete Long
ID: 9787858
Hi dougp23
Click Start , click Control Panel , click Performance and Maintenance , and then click Administrative Tools.

Double-click Local Security Policy .

In the left panel, double-click Local Policies to expand it.

Go to Security options. These are our recommendations for a good high security system.
,
Default user screensaver enabled
Enabled

Default user screensaver password protection is enabled
Enabled

Default user screensaver program
Logon.scr

Default user screensaver timeout value
900



Cheers!
0
 
LVL 44

Accepted Solution

by:
CrazyOne earned 100 total points
ID: 9787859
Start > Run gpedit.msc

User Configuration > Administrative Templates > Control Panel > Dispaly
Double click Screen Saver
0
 

Expert Comment

by:jiriki
ID: 9787980
The simplest way would be to deny access to the Display control panel and pre-set the screensaver so that students could not directly change the settings with either a local or group policy.  This is under User Configuration | Administrative  Templates | Control Panel and it's sub-setting Display.

Alternatively, and less recommended way, would be to set the permissions on the Reg keys to read only for the student account.  Logon as the student and startup regedt32 (if you have dissallowed access to regedt32, your'll have to re-grant it temporarily).  Change permissions on HKCU\Control Panel\Desktop.  You could try the whole key or just the SCRNSAVE.EXE, ScreenSaveTimeOut keys.  When done, disallow regedit utils.

Still I would recommend doing this with Group policy.  If you do not have an AD to do GPO's, you can set the Local Group Policy for 2 distinct groups.  You do this by making the settings with Start | Admistrative Tools | Local Group Policy.  Next deny access to the Administrators group (or user) to the G:\WINDOWS\system32\GroupPolicy folder.  Thus on boot and logon, that account cannot read the local policy and thus it doesn't get enforced for them.  You must specifically use the deny option.  Otherwise, neither the teacher or student will be able to make the changes.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
networked printer 4 75
Copy a User Account in Win7 & Win8 11 134
Copy and Paste Windows 7 Files Not Working 6 93
Installing Windows XP from USB 10 100
Disclosure: Use this tutorial only when no other options helps to get Windows XP running without any problems and you don't want to format the drive. The back up of the data is the responsible of the user, however there is a description of how t…
Can you find a fax from a vendor you saved a decade ago in seconds? Have you ever cursed your PC under your breath during an audit because you couldn’t find the requested statement or driver history?  If you answered no to the first question or yes …
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now