Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 305
  • Last Modified:

Screen Saver Policy - Server 2008

Hi Guys,

I need to create a screen-saver policy which locks a computer for laptops after 15 minutes, but they need to be able to change this setting.

After logging out, this needs to reset back to 15 minutes.

How would I create this policy?

Thanks in advance!!
0
mikkha1l
Asked:
mikkha1l
  • 5
  • 3
  • 2
  • +1
1 Solution
 
mikkha1lAuthor Commented:
Anyone have any ideas at all?
0
 
ReubenwelshCommented:
Why do they need to be able to change this if your just going to change this back? When you set a GPO 99% of the time you lock that setting. The only option would be if the users where power users on there laptops.
0
 
Iain MacMillanIT ManagerCommented:
for Servers you never run screen-savers on them, ties up valuable resources - use power options to set screen shut-off (but not disk).

for desktops, its set via Group Policy under Admin Templates\Control Panel\Personalization, where you can set the SCR file and timeouts.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
mikkha1lAuthor Commented:
We need this setup through GPO because users need to be able to change the setting when they have meetings due to powerpoint presentations, we don't want to elevate the level of access they have on the laptop either.

Is this possible via group policy on Server 2008? or would it be a local laptop policy?
0
 
johnb6767Commented:
Policy is going to set it, and disable the ability to change it.... Unless you offer something like a local .bat script to remove the policies form the registry directly.....
0
 
mikkha1lAuthor Commented:
Do you know how I would do that, only for the screensaver policy?
0
 
johnb6767Commented:
Let me post it in the AM..... I have a script that gives options to unhide, remove it etc....
0
 
mikkha1lAuthor Commented:
Thank you!! :) I will test it out and let you know how it goes..
0
 
johnb6767Commented:
Her ya go.... One of my older ones.....This is more fluff than anything, just a preference of mine in an interactive .bat script really... I like to make with nice output on screen... Close as I get to coding...  :-)
@echo off
setlocal
title Do not close this window!!!!!!

:pass
cls
set /p password=Please enter the password: 
REM Set the password below.....
if not %password%==PASSWORD goto pass

:begin
cls
echo  Please choose an action to perform for the ScreenSaver
echo  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
echo.
echo  A) Unhide the ScreenSaver Tab
echo  B) Change the Time Delay
echo  C) Remove the password prompt (might require a logoff)
echo  D) Disable the ScreenSaver
echo  E) Disable All
echo.
set /p choose=Make your selection please (A-B): 

if %choose%==a goto unhide
if %choose%==b goto sstime
if %choose%==c goto sssecure
if %choose%==d goto ssdisable
if %choose%==e goto ssall

:error
echo.
echo Input not recieved. Please retry. 
echo.
ping -n 3 localhost>nul
goto begin

:unhide
cls
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v NoDispScrSavPage /t reg_dword /d 0x0 /f >nul && echo ScreenSaver Tab unhidden successfully.
echo.
pause
goto again

:sstime
cls
set /p time=Enter the time for the delay in seconds (default is 900): 
echo.
cls
reg add "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /v ScreenSaveTimeOut /d "%time%" /f >nul && echo ScreenSaver Timeout changed successfully.
echo.
pause
goto again

:ssdisable
cls
reg add "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /v ScreenSaveActive /d 0 /f >nul && echo ScreenSaver disabled successfully.
echo.
pause
goto again

:sssecure
cls
reg add "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /v ScreenSaverIsSecure /d 0 /f >nul && echo ScreenSaver Password Prompt removed successfully.
echo.
pause
goto again

:ssall
cls
echo Removing all restrictions for the ScreenSaver....

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v NoDispScrSavPage /t reg_dword /d 0x0 /f>nul
reg add "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /v ScreenSaveTimeOut /d "599940" /f>nul 
reg add "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /v ScreenSaveActive /d 0 /f>nul
reg add "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /v ScreenSaverIsSecure /d 0 /f>nul
echo.
pause

:again
cls
set /p ask1=Do you wish to select another action? 
if %ask1%==y goto begin

:wait
cls
echo  **************************************************************************
echo.
echo     DON'T CLOSE THIS WINDOW UNTIL YOU ARE READY TO REVERSE THESE CHANGES  
echo        As soon as any key is pressed to continue, all settings will                                 
echo      be returned to their default states, and the ScreenSaver ENABLED.                        
echo.                                                                                                                                                
echo  **************************************************************************
echo.
pause

:reset
cls
echo Resetting ScreenSaver Values to DEFAULT
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
echo.
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v NoDispScrSavPage /t reg_dword /d 0x1 /f >nul && echo ScreenSaver Tab hidden successfully.
echo.
reg add "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /v ScreenSaveTimeOut /d "900" /f >nul && echo ScreenSaver timeout reset to 15 minutes. 
echo.
reg add "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /v ScreenSaveActive /d 1 //f >nul && echo ScreenSaver has been enabled. 
echo.
reg add "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /v ScreenSaverIsSecure /d 1 /f >nul && echo ScreenSaver Password Prompt has been enabled. 
echo.
pause


:end
cls
endlocal
echo Please logoff/logon to ensure all changes have been applied. 
echo.
pause

Open in new window

0
 
Iain MacMillanIT ManagerCommented:
nice script JB, should solve the OP's issue perfectly.
0
 
mikkha1lAuthor Commented:
This had worked.
0

Featured Post

Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

  • 5
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now