Is there a way for users to choose their own screensavers when GP is enforcing a password-protected screensaver?


I'm supporting a user who has his own rotating screensaver that he wants to use, but the domain Group Policy settings enforce a password-protected screensaver.  Is there a way to enforce that a screensaver is password-protected yet still be able to choose what screensaver you want?  I'm open to creating an OU for this user or whatever needs to be done to resolve it, but need to still be able to enforce the security policy.
Any help is appreciated.

Thank you.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

You can go into the group policy (that disables the policy)then go to the delegation tab then the advanced button down at the bottom right.
Now add your user you want then go to apply group policy and then deny.
This would obviously deny this entire policy for this user so you may need to decide on what you want to do -
Either create a new OU for this user
Deny this group policy for this one user
edit the original GPO and reomve the screensaver option and create a new GPO with just the screensaver setting then apply it to the same OU and deny it for that one user as mentioned above
there is always the forcing of a screensaver that you specify through GPO..just another option to think about :)
bluelangroupAuthor Commented:
Hi guys,

Thanks for the input, these are good ideas.  I think I may be able to combine these two ideas: To separate the different policies and deny the generic password-protected screensaver to the user in question.  Then I could force a specific screensaver via GP to this user.  If I forced a specific screensaver, I have two follow-up questions: 1. How to do this in GP and 2. Can this enforced screensaver also be password-protected?

Thanks for the help.
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

yah, but if you implent security filtering, make sure you implement it on both policies - one for the user in question and the rest for everything else, i would personally save the hassle and for simplicity create a second OU with a different policy

your screensaver policies are all under your desktop options - you simply specify the scr file and yes, it can still be password protected
bluelangroupAuthor Commented:
Thanks, that sounds right.  I'll give that a shot and let you know how it goes.  
no worries

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
bluelangroupAuthor Commented:
Thanks for your help, I was able to get around the issue.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.