Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

group policy to lock idle computers

Posted on 2008-10-31
9
Medium Priority
?
954 Views
Last Modified: 2012-05-05
Hi everyone, I'm trying to find in the GP editor on my domain controller the place to lock idle computers for a set period of time.  After researching post on EE it looks like people are talking about the screen saver and forcing that to lock.

What I'm looking for is the GP to edit so a computer left idle with lock and require a CTRL+ALT+DEL to be done to unlock by the current user/administrator.
Does anyone know that specific location? I remember in the past it had to be set by seconds too.
Thank you in advance!
0
Comment
Question by:jbishop2446b
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 2
9 Comments
 
LVL 7

Expert Comment

by:cmarandi
ID: 22851883
??? When the screensaver is locked you have to hit CTRL+ALT+DEL  to unlock it.
0
 
LVL 24

Expert Comment

by:ryansoto
ID: 22851899
Not sure but it does sound like after X minutes you want the computer to local and when that user or another user returns they need to press control alt del and input their username and password to unlock...Is this right?
If so then the easiest and most efficient way would be to use the screen saver lock will meets all your requirements
0
 

Author Comment

by:jbishop2446b
ID: 22851913
if you hit ctrl+alt+del right now, then click on lock or press enter the screen locks.. that is what I'm looking for in a group polocy and with a set time...I've done it in the past but can't find where it is.
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 7

Expert Comment

by:cmarandi
ID: 22851954
When you put password lock on a screen saver (even if the saver is blank) when you move a mouse, the only way to unlock it is to press CTRL + ALT + DEL

I 'm confused as to what you are asking for.
0
 

Author Comment

by:jbishop2446b
ID: 22851982
That must be the solution! I'm just looking for an auto lock... that takes place and does what one can do manually by press ctrl alt del..  The screen saver part confused me
0
 
LVL 24

Expert Comment

by:ryansoto
ID: 22851997
Yup just set the screen saver policy under a GPO and you will be good to go
0
 
LVL 7

Expert Comment

by:cmarandi
ID: 22852022
hahahaha... you were confusing me too.  yup.. it's the password protect on the screen saver
0
 

Author Comment

by:jbishop2446b
ID: 22852129
so any clue where the right spot is for that? thank you again ;)
0
 
LVL 7

Accepted Solution

by:
cmarandi earned 2000 total points
ID: 22852182
Yup
Go to Group Polic Manager
Right Click the Default Domain Policy
Choose to Edit
Go to User Configuration
Go to Administrative Templates
Go to Control Panel
Go to Display
Set these 3:
Screen Saver (So one is required)
Password Protect the Screen Saver (So it requires the CTRL+ALT+DEL)
Screen Saver Timeout (To set the timeout)
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
A hard and fast method for reducing Active Directory Administrators members.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question