Missing Group Policy Objects

We installed a new version of Windows Server 2008 x64 on a network with just a handful of users. All the users are complaining that they are getting locked out of their computers after 5 minutes are being forced to login (again, after 5 minutes of being idle).

I'm trying to disable this feature through Group Policy but I cannot find the right settings. I've updated this before on 2003 Server but I can't find it here. This is where I'm already looking:

Default Domain Policy
User Configuration
Admin  Templates
Control Panel

I only see 2 objects in the Settings column: Disable the Display Control Panel and Hide Settings Tab. I think that the policy object I'm looking for is called Screen Saver but I cannot find it nor can I figure out how to add that here...thus my guess that maybe these were not installed during server setup..

My question now is...how can I add it?
Who is Participating?
the GPO settings you are looking for are:
Node: User Configuration\Administrative Templates\Control Panel\Display
Setting: Screen Saver
Setting: Screen Saver executable name
Setting: Password protect the screen saver
Setting: Screen Saver Timeout
Node: User Configuration\Administrative Templates\Control Panel\Personalization
Setting: Enable Screen Saver
Setting: Force specific Screen Saver
Setting: Password protect the screen saver
Setting: Screen Saver Timeout
Well, for the screensaver options ("Screen Saver Timeout", and "Password protect the screensaver") you're looking in *nearly* the right place.

You have the settings location correct, but I would not expect this to be set in the Default Domain Policy. What policies do you actually have? If you're not sure, open GPMC, expand domain etc, and locate the container called "Group Policy Objects". Expand that - What do you have listed here? Just the DDP and the DDCP?

Though that doesn't address why you can't even see the settings in the DDP. They should definitely be there! But again, this would NOT be set by default in either of the mentioned policies.

So maybe a little more background is needed - Is this new DC the ONLY DC in the domain? Or is it just an addition to the current domain?

You should run an RSoP session on any of the computers experiencing the problem. To do this, just use AD U&C, right-click on any computer that has the problem, and once the wizard starts, specify a user account (it has to be a user that logs on to the PC, and the PC you select has to be powered on and on the network). Next through the rest of the wizard, and you should end up with the RSoP results console, which will ONLY show settings that have been configured and apply to that PC and User.

This may show you that a policy you were previously unaware of is actually affecting one of the 2 objects (user object or computer object). It should help find out where the setting is coming from...

If you have any questions, please just ask!


oh, and I forgot to say...
this can be in ANY GPO, but you need to decide in which GPO you want to configure this. My suggestion would be: Linked to the OU of the users OU
vincent_rocoAuthor Commented:
Thank you...I'm checking on these solutions now.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.