Solved

Don't allow screensaver or background changes

Posted on 2003-11-20
3
2,339 Views
Last Modified: 2008-02-26
We are a school.  Our XP stations have 2 logins, teacher or Student.  We want to disallow students from changing the background or screensavers (they do cute things like "start screensaver in 1 minute" or make strange messages for a screensaver).

I looked at the local policies and didn't see it.  Is there a way?

Thanks.
0
Comment
Question by:dougp23
3 Comments
 
LVL 57

Expert Comment

by:Pete Long
ID: 9787858
Hi dougp23
Click Start , click Control Panel , click Performance and Maintenance , and then click Administrative Tools.

Double-click Local Security Policy .

In the left panel, double-click Local Policies to expand it.

Go to Security options. These are our recommendations for a good high security system.
,
Default user screensaver enabled
Enabled

Default user screensaver password protection is enabled
Enabled

Default user screensaver program
Logon.scr

Default user screensaver timeout value
900



Cheers!
0
 
LVL 44

Accepted Solution

by:
CrazyOne earned 100 total points
ID: 9787859
Start > Run gpedit.msc

User Configuration > Administrative Templates > Control Panel > Dispaly
Double click Screen Saver
0
 

Expert Comment

by:jiriki
ID: 9787980
The simplest way would be to deny access to the Display control panel and pre-set the screensaver so that students could not directly change the settings with either a local or group policy.  This is under User Configuration | Administrative  Templates | Control Panel and it's sub-setting Display.

Alternatively, and less recommended way, would be to set the permissions on the Reg keys to read only for the student account.  Logon as the student and startup regedt32 (if you have dissallowed access to regedt32, your'll have to re-grant it temporarily).  Change permissions on HKCU\Control Panel\Desktop.  You could try the whole key or just the SCRNSAVE.EXE, ScreenSaveTimeOut keys.  When done, disallow regedit utils.

Still I would recommend doing this with Group policy.  If you do not have an AD to do GPO's, you can set the Local Group Policy for 2 distinct groups.  You do this by making the settings with Start | Admistrative Tools | Local Group Policy.  Next deny access to the Administrators group (or user) to the G:\WINDOWS\system32\GroupPolicy folder.  Thus on boot and logon, that account cannot read the local policy and thus it doesn't get enforced for them.  You must specifically use the deny option.  Otherwise, neither the teacher or student will be able to make the changes.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ok I have been working on this for some time having learned and gained certification in XenDesktop 4 along came version 5 which was released last month. Since then I have been working to deploy XenDesktop 5 in a small environment with only 2 virt…
If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article (http://rdsrc.us/u3GP7A) first and run the tool TDSSKiller (http://rdsrc.us/GDBBs4) to get rid of the infection. Once done, and if the …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question