bgcpc
asked on
GPO for Screensaver Timeout - How to avoid override?
Environment: Windows 2003 Active Directory. All workstations are windows xp.
We have a gpo on workstations to start the screensaver after 15 minutes and require password to unlock using the following :
User Configuration/Administrati ve Templates/Control Panel/Display
Password protect the screen saver - Enabled
Screen Saver - Enabled
Screen Saver Timeout - Enabled
Number of seconds to wait to enable the screen saver seconds: 900
Some crafty users found a way around this by changing the following registry keys:
[HKEY_USERS\S-1-5-21-12144 40339-8542 45398-1177 238915-287 2\Software \Policies\ Microsoft\ Windows\Co ntrol Panel\Desktop]
"ScreenSaverIsSecure"="0"
"ScreenSaveTimeOut"="0"
"ScreenSaveActive"="0"
This would be fine if the normal group policy refresh would overwrite this and change it back, but it doesn't. The only way to set it back is to do a gpupdate /force on the workstation. Do you have any ideas on how to get these users policy back without having to visit each workstation? Secondly, how do i prevent them from doing it again?
We have a gpo on workstations to start the screensaver after 15 minutes and require password to unlock using the following :
User Configuration/Administrati
Password protect the screen saver - Enabled
Screen Saver - Enabled
Screen Saver Timeout - Enabled
Number of seconds to wait to enable the screen saver seconds: 900
Some crafty users found a way around this by changing the following registry keys:
[HKEY_USERS\S-1-5-21-12144
"ScreenSaverIsSecure"="0"
"ScreenSaveTimeOut"="0"
"ScreenSaveActive"="0"
This would be fine if the normal group policy refresh would overwrite this and change it back, but it doesn't. The only way to set it back is to do a gpupdate /force on the workstation. Do you have any ideas on how to get these users policy back without having to visit each workstation? Secondly, how do i prevent them from doing it again?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER