GPO for Screensaver Timeout - How to avoid override?
Posted on 2009-03-31
Environment: Windows 2003 Active Directory. All workstations are windows xp.
We have a gpo on workstations to start the screensaver after 15 minutes and require password to unlock using the following :
User Configuration/Administrative Templates/Control Panel/Display
Password protect the screen saver - Enabled
Screen Saver - Enabled
Screen Saver Timeout - Enabled
Number of seconds to wait to enable the screen saver seconds: 900
Some crafty users found a way around this by changing the following registry keys:
This would be fine if the normal group policy refresh would overwrite this and change it back, but it doesn't. The only way to set it back is to do a gpupdate /force on the workstation. Do you have any ideas on how to get these users policy back without having to visit each workstation? Secondly, how do i prevent them from doing it again?