[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 946
  • Last Modified:

Changing the screen saver timeout after login

I need a way to change the login timeout after a user has logged into the computer.

The user will not have access to the control panel and this needs to be something that does not require a registry change that involves a reboot.

My reasoning is we have group policies that set the logout to 10 minutes. We have about four computers we use for presentations that need this time to be reset since there is apparently no way to set a machine level policy.

I have tried a vb script and this does not work becuase these require a reboot.

0
Alemus
Asked:
Alemus
2 Solutions
 
Donald StewartNetwork AdministratorCommented:
You CAN make it  a machine policy by using Loopback Policy
http://x220.minasi.com/forum/topic.asp?TOPIC_ID=22714 
0
 
Dirtpatch-JenkinsCommented:
I know you said that a group policy dictates the time,, but does it enforce it?

can u just right click on your desktop goto screen saver and over ride the default there?
0
 
Donald StewartNetwork AdministratorCommented:
group policy refresh would just set it back
0
New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

 
Donald StewartNetwork AdministratorCommented:
from above link
 
Policy settings that control screen saver settings are in the USER node, not the Computer one. You want to mandate a screen saver for all users, but ONLY when those users are sitting at a given machine. The answer is a loopback policy, which says "there are indeed USER settings, but only apply them to anyone sitting at this particular COMPUTER."

0
 
subliferCommented:
Two possibilities, create a separate OU and policy for these 4 PCs or adjust the policy refresh period so you can change it on the PC when needed and it doesn't change during a presentation.

3rd option: If these PCs aren't used for anything but presentations, perhaps you can just remove them from the domain.
0
 
CriffordCommented:
Ok, this is possible using a batch File. This does not require a reboot, but it will make the timeout unchangable, unless you delete the policy registry key back out. See below code:-
Just replace <timeout_value> with the time you want in seconds i.e for 10min <timeout_value> = 600
reg add "HKcu\Control Panel\Desktop" /v screensavetimeout /d <timeout_value> /f
REG ADD "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /V ScreenSaveTimeOut /T REG_SZ /F /D <timeout_value>
RunDll32.exe USER32.DLL,UpdatePerUserSystemParameters ,1 ,True

Open in new window

0
 
Donald StewartNetwork AdministratorCommented:
group policy refresh would just set it back
0
 
CriffordCommented:
No, as long as the gp refresh is set to long enough this works fine. By default I believe this is set to a fairly long time anyway. If this batch file is placed in the All Users Startup directory it will be processed on logon, but after GP processing.
0
 
Donald StewartNetwork AdministratorCommented:
yes  every 90 minutes, but instead of using a workaround that a limited user may not have access to use(write to the registry)  a simple group policy with loopback and applying to these four computers should be simple enough.
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now