Link to home
Start Free TrialLog in
Avatar of bgcpc
bgcpc

asked on

GPO for Screensaver Timeout - How to avoid override?

Environment: Windows 2003 Active Directory. All workstations are windows xp.
We have a gpo on workstations to start the screensaver after 15 minutes and require password to unlock using the following :
User Configuration/Administrative Templates/Control Panel/Display
 Password protect the screen saver - Enabled
 Screen Saver - Enabled
 Screen Saver Timeout - Enabled
 Number of seconds to wait to enable the screen saver seconds: 900

Some crafty users found a way around this by changing the following registry keys:
[HKEY_USERS\S-1-5-21-1214440339-854245398-1177238915-2872\Software\Policies\Microsoft\Windows\Control Panel\Desktop]
"ScreenSaverIsSecure"="0"
"ScreenSaveTimeOut"="0"
"ScreenSaveActive"="0"

This would be fine if the normal group policy refresh would overwrite this and change it back, but it doesn't.  The only way to set it back is to do a gpupdate /force on the workstation. Do you have any ideas on how to get these users policy back without having to visit each workstation? Secondly, how do i prevent them from doing it again?
ASKER CERTIFIED SOLUTION
Avatar of Americom
Americom
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of Don
Don
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of bgcpc
bgcpc

ASKER

Thanks, looks like this should do the trick.