Missing Group Policy Objects

Posted on 2010-01-08
Last Modified: 2012-06-27
We installed a new version of Windows Server 2008 x64 on a network with just a handful of users. All the users are complaining that they are getting locked out of their computers after 5 minutes are being forced to login (again, after 5 minutes of being idle).

I'm trying to disable this feature through Group Policy but I cannot find the right settings. I've updated this before on 2003 Server but I can't find it here. This is where I'm already looking:

Default Domain Policy
User Configuration
Admin  Templates
Control Panel

I only see 2 objects in the Settings column: Disable the Display Control Panel and Hide Settings Tab. I think that the policy object I'm looking for is called Screen Saver but I cannot find it nor can I figure out how to add that here...thus my guess that maybe these were not installed during server setup..

My question now can I add it?
Question by:vincent_roco
    LVL 19

    Assisted Solution

    Well, for the screensaver options ("Screen Saver Timeout", and "Password protect the screensaver") you're looking in *nearly* the right place.

    You have the settings location correct, but I would not expect this to be set in the Default Domain Policy. What policies do you actually have? If you're not sure, open GPMC, expand domain etc, and locate the container called "Group Policy Objects". Expand that - What do you have listed here? Just the DDP and the DDCP?

    Though that doesn't address why you can't even see the settings in the DDP. They should definitely be there! But again, this would NOT be set by default in either of the mentioned policies.

    So maybe a little more background is needed - Is this new DC the ONLY DC in the domain? Or is it just an addition to the current domain?

    You should run an RSoP session on any of the computers experiencing the problem. To do this, just use AD U&C, right-click on any computer that has the problem, and once the wizard starts, specify a user account (it has to be a user that logs on to the PC, and the PC you select has to be powered on and on the network). Next through the rest of the wizard, and you should end up with the RSoP results console, which will ONLY show settings that have been configured and apply to that PC and User.

    This may show you that a policy you were previously unaware of is actually affecting one of the 2 objects (user object or computer object). It should help find out where the setting is coming from...

    If you have any questions, please just ask!


    LVL 5

    Accepted Solution

    the GPO settings you are looking for are:
    Node: User Configuration\Administrative Templates\Control Panel\Display
    Setting: Screen Saver
    Setting: Screen Saver executable name
    Setting: Password protect the screen saver
    Setting: Screen Saver Timeout
    Node: User Configuration\Administrative Templates\Control Panel\Personalization
    Setting: Enable Screen Saver
    Setting: Force specific Screen Saver
    Setting: Password protect the screen saver
    Setting: Screen Saver Timeout
    LVL 5

    Expert Comment

    oh, and I forgot to say...
    this can be in ANY GPO, but you need to decide in which GPO you want to configure this. My suggestion would be: Linked to the OU of the users OU

    Author Comment

    Thank you...I'm checking on these solutions now.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Do email signature updates give you a headache?

    Constantly trying to correctly format email signatures? Spending all of your time at every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

    You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    This tutorial will give a short introduction and overview of Backup Exec 2014 and the additional features that have been added over its predecessor Backup Exec 2012. As with Backup Exec 2012, the Backup Exec button in the upper left corner. From her…
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now