Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1749
  • Last Modified:

Lock Desktop Group Policy in Windows 7

Hello Everyone,

I know that there is a desktop lock setting in XP group policy in the screen saver settings but i have been unable to find one for the Windows 7 environment. I would like to apply a policy to lock all desktops on the network after 20 minutes of activity. Does anyone know if a group policy setting that would accomplish this?
0
JohnnyD74
Asked:
JohnnyD74
  • 5
  • 5
1 Solution
 
Eduardo GoicovichIT ConsultantCommented:
0
 
eugene20022002Commented:
Hi

The way Im doing it is via a group policy deploying a screensaver.
Please have a look at the attached pics for where to find the Group policy settings.
As you can see the screensaver is in effect and the timeout period is greyed out so that they cannot change it. Default 10min.

 GPO Settings 1 Screen Saver TimeOut Greyed Out GPO Settings that can be edited
0
 
JohnnyD74Author Commented:
Thanks. I found the policy but don't see how one can set the computer to lock when the screen saver starts though group policy. Does it to that by default?
0
Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

 
eugene20022002Commented:
It does that by default and is set for 10 min.
You will see in the picture there is a setting called Screen saver timeout You will enable that and specify 20 minutes in your case.

Test it and you should find that when the screensaver stops the machine will be locked and you will be required to insert a uid and pass.
If it doesnt work you can use the Password protect the screen saver setting
0
 
JohnnyD74Author Commented:
Thanks Eugene...but unfortunately, in my tests just now, the GPs don't lock the computer by default.  I am trying to avoid manual settings as then I would have to go to every computer. Do you...or anyone reading this know how I could accomplish this with a group policy or perhaps a script?
0
 
eugene20022002Commented:
Does the screensaver that you specify via GP work?
You need to actually specify a screensaver executable for it to be effective.

Then do a gpupdate /force. and make sure your gp has been applied by running gpresult /R

In my case it took about 2 reboots  and I had to wait a while for replication to take effect.
0
 
JohnnyD74Author Commented:
Yes...the screen saver works fine and I have refreshed the policy. The settings are greyed out on the computer so I know the policy has taken affect. And I did specify an executable for the screen saver as well: "scrnsave.scr" which is a blank one. It seems that the policy does not by default select the "lock machine" setting.
0
 
eugene20022002Commented:
have you set the following aswell
enable password protect
enable screensaver timeout
0
 
JohnnyD74Author Commented:
Wow...for some reason I missed that one. Thanks! I am sure that will do the trick!
0
 
JohnnyD74Author Commented:
Thanks for your help Euegene
0
 
eugene20022002Commented:
no problem and thanks for points
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 5
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now