GPO for Screensaver Timeout - How to avoid override?

Environment: Windows 2003 Active Directory. All workstations are windows xp.
We have a gpo on workstations to start the screensaver after 15 minutes and require password to unlock using the following :
User Configuration/Administrative Templates/Control Panel/Display
 Password protect the screen saver - Enabled
 Screen Saver - Enabled
 Screen Saver Timeout - Enabled
 Number of seconds to wait to enable the screen saver seconds: 900

Some crafty users found a way around this by changing the following registry keys:
[HKEY_USERS\S-1-5-21-1214440339-854245398-1177238915-2872\Software\Policies\Microsoft\Windows\Control Panel\Desktop]
"ScreenSaverIsSecure"="0"
"ScreenSaveTimeOut"="0"
"ScreenSaveActive"="0"

This would be fine if the normal group policy refresh would overwrite this and change it back, but it doesn't.  The only way to set it back is to do a gpupdate /force on the workstation. Do you have any ideas on how to get these users policy back without having to visit each workstation? Secondly, how do i prevent them from doing it again?
LVL 1
bgcpcAsked:
Who is Participating?
 
AmericomCommented:
You can make the GPO to process even if the GPO has not changed:
Computer Configuration>Administrative Templates>System>Group Policy>Registry policy processing>Enable and select "Process even if the Group Policy objects".

Since you have set GPO and if the user still change the registry, then he/she violate the company policy, take them out of the Administrators group of their machine.
0
 
DonNetwork AdministratorCommented:
You could also.....

Disable registry editing tools

User Configuration\Administrative Templates\System
0
 
johnb6767Commented:
And for the craftiest of the crafty, disable access to reg.exe......
0
 
bgcpcAuthor Commented:
Thanks, looks like this should do the trick.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.