Allow setting shorter workstation timeout when screen saver group policy is set

I have a group policy set to lock workstations after 20 minutes of inactivity.  Is there a way to modify this so that users can choose a shorter period of inactivity for locking but not let them choose more than 20 minutes?  Under the current policy the wait time box on the screen saver window is grayed out for them.  
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Not that i am aware of. Unless anyone else is aware of 3rd party tools that could do this?
since you already restrict them to change the time via the policy. there is no way for users to change them.

but you can overwrite the setting by adding the users to "deny apply group policy" of the GPO.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Adam BrownSr Solutions ArchitectCommented:
Once any setting is applied through a GPO, it cannot be set through manual configuration on a client. That's one of the purposes of Group Policy, to allow consistent configuration of systems and prevent configuration tampering. One option you could look at is setting different classes of lock/time out periods and creating a GPO for each time period. One GPO for users who want 5 minutes, one for 10, one for 15, etc. Once this is done, you could then create a group for the users that want a certain timeout and use security filtering to limit GPO application. Aside from that, there is no way to allow users to change the timeout if it's set in a GPO.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.