• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1469
  • Last Modified:

Screen Saver Grace Period

Hi,
We are running Windows Server 2003 Domain controllers. I need to configure ScreenSaverGracePeriod value through GPO. Please suggest me how to configure this via GPO

Thanks in advance.
0
gaddam01
Asked:
gaddam01
  • 16
  • 6
1 Solution
 
scriven_jCommented:
Are the clients XP or Windows 7?

You would need to set-up an ADM file for this setting.
0
 
scriven_jCommented:
I can advise more once you clarify clients. (or is this just for the Domain Controller?)
0
 
gaddam01Author Commented:
Hi,

Clients are running on XP. Can you please send me ADM File. It is Urgent.

Thanks in Advance.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
Krzysztof PytkoActive Directory EngineerCommented:
Do you have any Windows 2008/Windows 7? If so, you can use GPP to modify registry value. If you have not, then you need to use custom Administrative Template (ADM file) and import it to GPO.

If you need help with that, let me know. I will help you.

You will find which registry hive should be modified in this MS article at
http://technet.microsoft.com/en-us/library/cc785331%28WS.10%29.aspx

Regards,
Krzysztof
0
 
scriven_jCommented:
This should work.
CLASS MACHINE

CATEGORY "Custom Settings"
KEYNAME Software\Microsoft\Windows NT\CurrentVersion\Winlogon
CATEGORY "Screen Saver Grace Period"
KEYNAME Software\Microsoft\Windows NT\CurrentVersion\Winlogon
EXPLAIN "This policuy."
	POLICY "After you configure your computer to use a screen saver with a password, and after the screen saver has started, you may be able to bypass the password security and unlock the computer by pressing a key or by moving the mouse if you do so within the amount of time specified in this setting."
		PART "Grace Period (in seconds)" NUMERIC REQUIRED
		MIN 5
		MAX 2147483
		SPIN 5
		DEFAULT 5
		VALUENAME ScreenSaverGracePeriod
		END PART
	END POLICY
END CATEGORY
END CATEGORY

Open in new window

0
 
gaddam01Author Commented:
Hi,

I don't have any Windows 2008 or Widows 7 machines. Please send me the ADM file for Screen saver Grace period as fast as you can.
0
 
scriven_jCommented:
Sorry - slight error first time round.


CLASS MACHINE

CATEGORY "Custom Settings"
KEYNAME Software\Microsoft\Windows NT\CurrentVersion\Winlogon
CATEGORY "Screen Saver Grace Period"
KEYNAME Software\Microsoft\Windows NT\CurrentVersion\Winlogon
EXPLAIN "After you configure your computer to use a screen saver with a password, and after the screen saver has started, you may be able to bypass the password security and unlock the computer by pressing a key or by moving the mouse if you do so within the amount of time specified in this setting."
	POLICY "Screen Saver Grace Period"
		PART "Grace Period (in seconds)" NUMERIC REQUIRED
		MIN 5
		MAX 2147483
		SPIN 5
		DEFAULT 5
		VALUENAME ScreenSaverGracePeriod
		END PART
	END POLICY
END CATEGORY
END CATEGORY

Open in new window

0
 
gaddam01Author Commented:
Hi,

Thanks for the reply. In GPMC where I can find the above settings to modify the value for Screen Saver Grace Period??

Thanks in Advance.
0
 
scriven_jCommented:
Do you need any help adding this to Group Policy?
0
 
scriven_jCommented:
Add this to C:\Windows\INF

Add ADM though GPMC and uncheck "Only show policy that can be fully managed"

(right-click on administrative template, then View / Filtering)

You will find it in Computer Configuration, Custom Settings, Screen Saver Grace Period
0
 
scriven_jCommented:
Sorry, I said Right-Clic, but it is actually Left Click and then View, Filter
0
 
scriven_jCommented:
Third time lucky!

Left Click and then View, Filtering
0
 
scriven_jCommented:
Let me know if this is not clear!  Unfortunately the urgency of your query means I am not checking stuff as thoroughly as normal!
0
 
scriven_jCommented:
You might want to change the minimum settingin the ADM to 0 as opposed to 5.
0
 
scriven_jCommented:
Depends if you want the option of having no delay at all or not.
0
 
scriven_jCommented:
I also set the spin value to '5' (this is the increments for this setting), but you could change this to suit too.
0
 
gaddam01Author Commented:
Hi,

The Adm is file is not working. It is giving error while loading the adm template. Please find the attachment for the error. Please send the correct one urgently.
adm-error.docx
0
 
scriven_jCommented:
Seems like it doesn't like the space.

Give this a go:-

 
CLASS MACHINE

CATEGORY "Custom Settings"
KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
CATEGORY "Screen Saver Grace Period"
KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
EXPLAIN "After you configure your computer to use a screen saver with a password, and after the screen saver has started, you may be able to bypass the password security and unlock the computer by pressing a key or by moving the mouse if you do so within the amount of time specified in this setting."
	POLICY "Screen Saver Grace Period"
		PART "Grace Period (in seconds)" NUMERIC REQUIRED
		MIN 5
		MAX 2147483
		SPIN 5
		DEFAULT 5
		VALUENAME ScreenSaverGracePeriod
		END PART
	END POLICY
END CATEGORY
END CATEGORY

Open in new window

0
 
scriven_jCommented:
In fact, use this, where I have incorporated the changes suggested earlier:-


CLASS MACHINE

CATEGORY "Custom Settings"
KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
CATEGORY "Screen Saver Grace Period"
KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
EXPLAIN "After you configure your computer to use a screen saver with a password, and after the screen saver has started, you may be able to bypass the password security and unlock the computer by pressing a key or by moving the mouse if you do so within the amount of time specified in this setting."
	POLICY "Screen Saver Grace Period"
		PART "Grace Period (in seconds)" NUMERIC REQUIRED
		MIN 0
		MAX 2147483
		SPIN 5
		DEFAULT 5
		VALUENAME ScreenSaverGracePeriod
		END PART
	END POLICY
END CATEGORY
END CATEGORY

Open in new window

0
 
gaddam01Author Commented:
Hi,

Finally the ADM template worked for me. Thanks for the Great help.

Thanks
0
 
gaddam01Author Commented:
Hi,
The above ADM template is working fine. But small modification is required. In the above template registry key that has been put in is a DWORD and it should be REG_SZ. Can you please modify and send the template?

Please send it ASAP.

Thanks in advance
0
 
scriven_jCommented:

CLASS MACHINE

CATEGORY "Custom Settings"
KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
CATEGORY "Screen Saver Grace Period"
KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
EXPLAIN "After you configure your computer to use a screen saver with a password, and after the screen saver has started, you may be able to bypass the password security and unlock the computer by pressing a key or by moving the mouse if you do so within the amount of time specified in this setting."
	POLICY "Screen Saver Grace Period"
		PART "Grace Period (in seconds)" EDITTEXT
		VALUENAME "ScreenSaverGracePeriod" REQUIRED
		END PART
	END POLICY
END CATEGORY
END CATEGORY

Open in new window

0
 
scriven_jCommented:
I had to change this quite a lot.  Seems crazy that Microsoft would set the field as a string, when it is quite clearly a numeric value, but never mind.....
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 16
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now