Link to home
Start Free TrialLog in
Avatar of gaddam01
gaddam01

asked on

Screen Saver Grace Period

Hi,
We are running Windows Server 2003 Domain controllers. I need to configure ScreenSaverGracePeriod value through GPO. Please suggest me how to configure this via GPO

Thanks in advance.
Avatar of Jon Scriven
Jon Scriven
Flag of United Kingdom of Great Britain and Northern Ireland image

Are the clients XP or Windows 7?

You would need to set-up an ADM file for this setting.
I can advise more once you clarify clients. (or is this just for the Domain Controller?)
Avatar of gaddam01
gaddam01

ASKER

Hi,

Clients are running on XP. Can you please send me ADM File. It is Urgent.

Thanks in Advance.
Do you have any Windows 2008/Windows 7? If so, you can use GPP to modify registry value. If you have not, then you need to use custom Administrative Template (ADM file) and import it to GPO.

If you need help with that, let me know. I will help you.

You will find which registry hive should be modified in this MS article at
http://technet.microsoft.com/en-us/library/cc785331%28WS.10%29.aspx

Regards,
Krzysztof
This should work.
CLASS MACHINE

CATEGORY "Custom Settings"
KEYNAME Software\Microsoft\Windows NT\CurrentVersion\Winlogon
CATEGORY "Screen Saver Grace Period"
KEYNAME Software\Microsoft\Windows NT\CurrentVersion\Winlogon
EXPLAIN "This policuy."
	POLICY "After you configure your computer to use a screen saver with a password, and after the screen saver has started, you may be able to bypass the password security and unlock the computer by pressing a key or by moving the mouse if you do so within the amount of time specified in this setting."
		PART "Grace Period (in seconds)" NUMERIC REQUIRED
		MIN 5
		MAX 2147483
		SPIN 5
		DEFAULT 5
		VALUENAME ScreenSaverGracePeriod
		END PART
	END POLICY
END CATEGORY
END CATEGORY

Open in new window

Hi,

I don't have any Windows 2008 or Widows 7 machines. Please send me the ADM file for Screen saver Grace period as fast as you can.
Sorry - slight error first time round.


CLASS MACHINE

CATEGORY "Custom Settings"
KEYNAME Software\Microsoft\Windows NT\CurrentVersion\Winlogon
CATEGORY "Screen Saver Grace Period"
KEYNAME Software\Microsoft\Windows NT\CurrentVersion\Winlogon
EXPLAIN "After you configure your computer to use a screen saver with a password, and after the screen saver has started, you may be able to bypass the password security and unlock the computer by pressing a key or by moving the mouse if you do so within the amount of time specified in this setting."
	POLICY "Screen Saver Grace Period"
		PART "Grace Period (in seconds)" NUMERIC REQUIRED
		MIN 5
		MAX 2147483
		SPIN 5
		DEFAULT 5
		VALUENAME ScreenSaverGracePeriod
		END PART
	END POLICY
END CATEGORY
END CATEGORY

Open in new window

Hi,

Thanks for the reply. In GPMC where I can find the above settings to modify the value for Screen Saver Grace Period??

Thanks in Advance.
Do you need any help adding this to Group Policy?
Add this to C:\Windows\INF

Add ADM though GPMC and uncheck "Only show policy that can be fully managed"

(right-click on administrative template, then View / Filtering)

You will find it in Computer Configuration, Custom Settings, Screen Saver Grace Period
Sorry, I said Right-Clic, but it is actually Left Click and then View, Filter
Third time lucky!

Left Click and then View, Filtering
Let me know if this is not clear!  Unfortunately the urgency of your query means I am not checking stuff as thoroughly as normal!
You might want to change the minimum settingin the ADM to 0 as opposed to 5.
Depends if you want the option of having no delay at all or not.
I also set the spin value to '5' (this is the increments for this setting), but you could change this to suit too.
Hi,

The Adm is file is not working. It is giving error while loading the adm template. Please find the attachment for the error. Please send the correct one urgently.
adm-error.docx
Seems like it doesn't like the space.

Give this a go:-

 
CLASS MACHINE

CATEGORY "Custom Settings"
KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
CATEGORY "Screen Saver Grace Period"
KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
EXPLAIN "After you configure your computer to use a screen saver with a password, and after the screen saver has started, you may be able to bypass the password security and unlock the computer by pressing a key or by moving the mouse if you do so within the amount of time specified in this setting."
	POLICY "Screen Saver Grace Period"
		PART "Grace Period (in seconds)" NUMERIC REQUIRED
		MIN 5
		MAX 2147483
		SPIN 5
		DEFAULT 5
		VALUENAME ScreenSaverGracePeriod
		END PART
	END POLICY
END CATEGORY
END CATEGORY

Open in new window

ASKER CERTIFIED SOLUTION
Avatar of Jon Scriven
Jon Scriven
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hi,

Finally the ADM template worked for me. Thanks for the Great help.

Thanks
Hi,
The above ADM template is working fine. But small modification is required. In the above template registry key that has been put in is a DWORD and it should be REG_SZ. Can you please modify and send the template?

Please send it ASAP.

Thanks in advance

CLASS MACHINE

CATEGORY "Custom Settings"
KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
CATEGORY "Screen Saver Grace Period"
KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
EXPLAIN "After you configure your computer to use a screen saver with a password, and after the screen saver has started, you may be able to bypass the password security and unlock the computer by pressing a key or by moving the mouse if you do so within the amount of time specified in this setting."
	POLICY "Screen Saver Grace Period"
		PART "Grace Period (in seconds)" EDITTEXT
		VALUENAME "ScreenSaverGracePeriod" REQUIRED
		END PART
	END POLICY
END CATEGORY
END CATEGORY

Open in new window

I had to change this quite a lot.  Seems crazy that Microsoft would set the field as a string, when it is quite clearly a numeric value, but never mind.....