Link to home
Start Free TrialLog in
Avatar of JAtkins3
JAtkins3Flag for United States of America

asked on

Screen Savers and LOCK out policy

I have 2 users of a terminal (2003) server that claim they are locked out (seems like a screen saver) during inactivity of 3-4 minutes. I have logged onto the TS from there system and others with an RDP session and it take 1/2 hour. I have tried and checked both local policy and Domain policy on this OU and for the DOMAIN. I am unable to find an answer as to why just these 1-2 users claim to be locked out of there session. they claim they have to log back in all day long.

Jim
Avatar of adam1115
adam1115
Flag of United States of America image

Can you clarify?

When they return to their computer 3-4 minutes later, is it 'locked' and asks them to enter their password?  

Or does it disconnect them from their terminal session?
Screen savor lockouts are user side in GPOs.  Is there a gpo attached to a group both users are a member of?
When logged in with their profile check the Screen Saver settings, it is possible for the end-user to change the time in the screen saver section themselves
Avatar of JAtkins3

ASKER

adam1115: yes locked  and asking for UID/PWD   session not ended

vahiid:  Users do not have the option to make changes on the TS for screen saver.

Mikealcl:  there is a GPO. one for the doamin. One for the OU that the TS is in. and a LOCAL on the TS. none have any settings AS FAR as i have been able to locate to lock or turn screen savers on or off.
Are your profiles stored on the Citrix server?  Or are they roaming?
no roaming  
All windows
At this point each user is going to have to disable it in the screen saver settings.

It could be done via the registry...

I recommend modify your default profile to configure thing how'd you like so that by default users have the correct settings.
adam1115: How would I configure Default profile for all users?
ASKER CERTIFIED SOLUTION
Avatar of adam1115
adam1115
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Copying profiles is so 20th century. ;)

Run rsop.msc with the users credentials when they're logged on, or use group policy modeling in GPMC to find out what are the effective settings for them and where they come from.
adam1115: inside the profiles logged on as admin  is see all the users that have logged onto this terminal server.
Would i have to delete the existing profiles (all the end-user profiles) in order for this to work?

 
Updating the default profile is only going to help with new users.