[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2342
  • Last Modified:

Missing Group Policy Objects

We installed a new version of Windows Server 2008 x64 on a network with just a handful of users. All the users are complaining that they are getting locked out of their computers after 5 minutes are being forced to login (again, after 5 minutes of being idle).

I'm trying to disable this feature through Group Policy but I cannot find the right settings. I've updated this before on 2003 Server but I can't find it here. This is where I'm already looking:

Default Domain Policy
User Configuration
Policies
Admin  Templates
Control Panel
Display


I only see 2 objects in the Settings column: Disable the Display Control Panel and Hide Settings Tab. I think that the policy object I'm looking for is called Screen Saver but I cannot find it nor can I figure out how to add that here...thus my guess that maybe these were not installed during server setup..

My question now is...how can I add it?
0
vincent_roco
Asked:
vincent_roco
  • 2
2 Solutions
 
PeteJThomasCommented:
Well, for the screensaver options ("Screen Saver Timeout", and "Password protect the screensaver") you're looking in *nearly* the right place.

You have the settings location correct, but I would not expect this to be set in the Default Domain Policy. What policies do you actually have? If you're not sure, open GPMC, expand domain etc, and locate the container called "Group Policy Objects". Expand that - What do you have listed here? Just the DDP and the DDCP?

Though that doesn't address why you can't even see the settings in the DDP. They should definitely be there! But again, this would NOT be set by default in either of the mentioned policies.

So maybe a little more background is needed - Is this new DC the ONLY DC in the domain? Or is it just an addition to the current domain?

You should run an RSoP session on any of the computers experiencing the problem. To do this, just use AD U&C, right-click on any computer that has the problem, and once the wizard starts, specify a user account (it has to be a user that logs on to the PC, and the PC you select has to be powered on and on the network). Next through the rest of the wizard, and you should end up with the RSoP results console, which will ONLY show settings that have been configured and apply to that PC and User.

This may show you that a policy you were previously unaware of is actually affecting one of the 2 objects (user object or computer object). It should help find out where the setting is coming from...

If you have any questions, please just ask!

HTH

Pete
0
 
ZJORZCommented:
the GPO settings you are looking for are:
 
W2K3
Node: User Configuration\Administrative Templates\Control Panel\Display
Setting: Screen Saver
Setting: Screen Saver executable name
Setting: Password protect the screen saver
Setting: Screen Saver Timeout
 
W2K8
Node: User Configuration\Administrative Templates\Control Panel\Personalization
Setting: Enable Screen Saver
Setting: Force specific Screen Saver
Setting: Password protect the screen saver
Setting: Screen Saver Timeout
 
0
 
ZJORZCommented:
oh, and I forgot to say...
 
this can be in ANY GPO, but you need to decide in which GPO you want to configure this. My suggestion would be: Linked to the OU of the users OU
0
 
vincent_rocoAuthor Commented:
Thank you...I'm checking on these solutions now.

Vincent
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now