Solved

Screensaver settings via Group Policy

Posted on 2010-09-05
12
775 Views
Last Modified: 2012-05-10
Hi,
All users on our 2003 based system have a 20 minute timeout on the screensaver which I cannot seem to change.

I have searched group policy in the AD and set all references under user settings/administrative templates/control panel/display that reference the screensaver to 'not configured' but users still have a greyed out 20 minute setting - even after forcing GP update and 2 days.

I'm not sure where else to look so any suggestions are welcome.

Thanks.
0
Comment
Question by:jerryhatt
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 3
  • +2
12 Comments
 
LVL 65

Expert Comment

by:rockiroads
ID: 33607618
your looking at screensaver timeout right?
what about the registry
HKLM\Software\Policies\Microsoft\Windows\Control Panel\Desktop look for ScreenSaveTimeOut
or HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop

though I would of thought it would be same as group policy editor
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 33607619
Run on one of affected workstations RSoP.msc and navigate to user settings/administrative templates/control panel/display and chace which policy name is assigned there. Possibly, some GPO sets it again. Then you would know which policy should be disabled to prevent Screen Saver settings.
0
 

Author Comment

by:jerryhatt
ID: 33607719
Thanks iSiek,
RSOP shows me the settings are down to a GPO called companywide but I have already changed settings withing that policy but those changes are not being picked up.

I have ran gpupdate and gpupdate /force on one domain controller and client PC but to no avail.

There are several domain controllers on the network, could that be causing this issue?
0
Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

 
LVL 4

Expert Comment

by:amclaughlin01
ID: 33607791
Do you get different results if logged in under an administrative or domain admin account?  Also, have you checked the event viewer for any errors that might be related to GPOs?  If there were any errors, they would be under the system log.
0
 

Author Comment

by:jerryhatt
ID: 33607872
When logging on as admin there are no administrative templates as they are all set under a 'user's' group in AD. As admin I can change screensaver setting OK.

There are no errors in the log but there are notifications of group policy settings being updated successfully (not specific info on which settings).

I have forced gpupdate on all domain controllers and then on the client machine but it still has settings greyed out.

I have examined every GPO in the AD and none of them have the settings I am seeing when loggin into user's machines.
0
 
LVL 11

Expert Comment

by:farjadarshad
ID: 33609017
0
 

Author Comment

by:jerryhatt
ID: 33609172
Thanks farjadarshad - those articles relate to configuring the group policy which I am OK with , it is just that either the GP is not updating or replication has an error as the settings when looking in GPMC differ from the settings passed through to the client.

I have logged onto each domain controller and viewed the group policy but cannot find where the problem lies.
0
 
LVL 39

Accepted Solution

by:
Krzysztof Pytko earned 500 total points
ID: 33609186
OK, it looks like your policy was defined for users and now you set those settings to "Not configured". Clients still have them configured :) Setting in GPO "Not configured" doesn't restore default settings : So, open that "companywide" GPO and navigate to Screen Saver options. Set them to:

"Hide Screen Saver tab" -> Disabled
"Screen Saver" -> Enabled
and the most important setting in your case :)
"Screen Saver executable name" -> Disabled

then run gpupdate /force on client(s) or reboot them and check the results. You should be able to modify those settings from Control Panel on clients :]

After some time you can change that GPO to "Not configured" when you be sure that all of your clients have received correct settings.

Hope it helps.
0
 
LVL 65

Expert Comment

by:rockiroads
ID: 33609202
Is it possible for maybe a login script to copy over GPO? have a look at windows\system32\grouppolicy maybe this has been set then this is copied over by some login script. just a thought.
I was looking at secedit but couldn't find screensaver options in there.
0
 
LVL 65

Expert Comment

by:rockiroads
ID: 33609249
not sure how windows\system32\grouppolicy works actually, just thinking maybe something in there might point to your troubles
0
 

Author Closing Comment

by:jerryhatt
ID: 33609312
Thank you iSiek, it was indeed that setting the items to 'not configured' did not remove their settings on the client.

All working now! Thanks again.
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 33609352
You're welcome.
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question