Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 783
  • Last Modified:

Screensaver settings via Group Policy

Hi,
All users on our 2003 based system have a 20 minute timeout on the screensaver which I cannot seem to change.

I have searched group policy in the AD and set all references under user settings/administrative templates/control panel/display that reference the screensaver to 'not configured' but users still have a greyed out 20 minute setting - even after forcing GP update and 2 days.

I'm not sure where else to look so any suggestions are welcome.

Thanks.
0
jerryhatt
Asked:
jerryhatt
  • 4
  • 3
  • 3
  • +2
1 Solution
 
rockiroadsCommented:
your looking at screensaver timeout right?
what about the registry
HKLM\Software\Policies\Microsoft\Windows\Control Panel\Desktop look for ScreenSaveTimeOut
or HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop

though I would of thought it would be same as group policy editor
0
 
Krzysztof PytkoActive Directory EngineerCommented:
Run on one of affected workstations RSoP.msc and navigate to user settings/administrative templates/control panel/display and chace which policy name is assigned there. Possibly, some GPO sets it again. Then you would know which policy should be disabled to prevent Screen Saver settings.
0
 
jerryhattAuthor Commented:
Thanks iSiek,
RSOP shows me the settings are down to a GPO called companywide but I have already changed settings withing that policy but those changes are not being picked up.

I have ran gpupdate and gpupdate /force on one domain controller and client PC but to no avail.

There are several domain controllers on the network, could that be causing this issue?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
amclaughlin01Commented:
Do you get different results if logged in under an administrative or domain admin account?  Also, have you checked the event viewer for any errors that might be related to GPOs?  If there were any errors, they would be under the system log.
0
 
jerryhattAuthor Commented:
When logging on as admin there are no administrative templates as they are all set under a 'user's' group in AD. As admin I can change screensaver setting OK.

There are no errors in the log but there are notifications of group policy settings being updated successfully (not specific info on which settings).

I have forced gpupdate on all domain controllers and then on the client machine but it still has settings greyed out.

I have examined every GPO in the AD and none of them have the settings I am seeing when loggin into user's machines.
0
 
jerryhattAuthor Commented:
Thanks farjadarshad - those articles relate to configuring the group policy which I am OK with , it is just that either the GP is not updating or replication has an error as the settings when looking in GPMC differ from the settings passed through to the client.

I have logged onto each domain controller and viewed the group policy but cannot find where the problem lies.
0
 
Krzysztof PytkoActive Directory EngineerCommented:
OK, it looks like your policy was defined for users and now you set those settings to "Not configured". Clients still have them configured :) Setting in GPO "Not configured" doesn't restore default settings : So, open that "companywide" GPO and navigate to Screen Saver options. Set them to:

"Hide Screen Saver tab" -> Disabled
"Screen Saver" -> Enabled
and the most important setting in your case :)
"Screen Saver executable name" -> Disabled

then run gpupdate /force on client(s) or reboot them and check the results. You should be able to modify those settings from Control Panel on clients :]

After some time you can change that GPO to "Not configured" when you be sure that all of your clients have received correct settings.

Hope it helps.
0
 
rockiroadsCommented:
Is it possible for maybe a login script to copy over GPO? have a look at windows\system32\grouppolicy maybe this has been set then this is copied over by some login script. just a thought.
I was looking at secedit but couldn't find screensaver options in there.
0
 
rockiroadsCommented:
not sure how windows\system32\grouppolicy works actually, just thinking maybe something in there might point to your troubles
0
 
jerryhattAuthor Commented:
Thank you iSiek, it was indeed that setting the items to 'not configured' did not remove their settings on the client.

All working now! Thanks again.
0
 
Krzysztof PytkoActive Directory EngineerCommented:
You're welcome.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 4
  • 3
  • 3
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now