• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 404
  • Last Modified:

How can I create and deploy a screen saver policy to workstations?

Hi There,

We're running W2k3 Servers and XP Pro workstations. We've got a couple of workstations that are dotted about the office which often get left logged in on a user account stored in AD as "workstation" which has domain access rights.

Because these machines are left logged in, we have created a policy which activates the screenssaver after 15 minutes, and asks for the password if the mouse is moved.

Trouble is, I can only get the policy to work by putting the User account (workstation) in the OU which the policy is linked to. I don't want to do this, as i've got a number of servers which i want to put into the OU so that they have the same policy described applied.

I've noticed that in creating the policy, the screen saver options are all classed as "user configuration". Is there any way to apply this same function to the computer itself?

I don't want to have to configure the screensavers on each machine (as we've got a number of offices with workstations) and we've got a fair few servers which are in the same boat.

Hope there's enough info there. Just ask if not. Hope someone can shed some light on this!!
0
NedT
Asked:
NedT
  • 3
  • 3
1 Solution
 
Leon TealeCommented:
im not sure if this was mentioned in the text above i kinda got confused around the middle...

you can add computers to an ou and just like the GPO to the OU
0
 
NedTAuthor Commented:
Yup, got that part. The computers in question have been added to the OU and the GPO linked to it, but that doesnt work.

Only way that i can get it to work is to add the user account that is used to log onto the computer into the OU, but i don't want to do this as i've got servers in the OU which only have local admin accounts.

Hope thats a bit clearer :)
0
 
Leon TealeCommented:
ijust create a new OU
create a group of users then and just add the group....
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
NedTAuthor Commented:
But my servers only have local admins, not user accounts on AD.

The workstation PCs have got a user account on AD (called workstation) which is then used to log onto the machine/domain.

I tried making a group within an OU, and then added the machines to it, but that didnt work either. :-(
0
 
Leon TealeCommented:
honestly i think its the way your setting up your OU's...

so if you have created a new OU (for example; 'screen saver ou')
and in that is the workstations? or a group which the work stations are  apart of?
of just a group full of users, maybe '*all users* ? and this can be in the new OU
0
 
NedTAuthor Commented:
As it stands, the OU (called desktops and servers) has the workstations and server computer objects.
That doesnt work.

I tried putting the computer objects into a group, and then placing that group into an OU.
That didnt work.

I then tried just putting the user accounts (which is not the ideal solution, as described previously) into the OU.
That worked.

Going back to my original question, is it because on the GPO will only apply this screen saver policy to users rather than the computer itself?
0

Featured Post

Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now