Solved

Group Policy - Screen Saver option

Posted on 2012-04-10
18
1,584 Views
Last Modified: 2012-04-11
Trying to implement screen locking via screen saver timeout through Group Policy. I've created the user policy to turn on after 60 seconds and to use scrnsaver.scr. I know the policy applies to the workstation because I can go in and see it grayed out with the proper settings .. problem is, the machine never goes into the screensaver. I also tried a setting it to a different screensaver and even let the user choose .. nothing seems to work.

I've read some postings where its a registry key getting stuck but i was hoping there was something else. Anybody experience this before?
0
Comment
Question by:ded2545
  • 8
  • 7
  • 3
18 Comments
 
LVL 21

Expert Comment

by:motnahp00
ID: 37829636
Try these settings:

User Configuration -> Policies -> Administrative Templates -> Control Panel -> Personalization

Enable screen saver: Enabled
Screen saver timeout: Enabled | 60
Force specific screen saver: Enabled | %your location: either local or UNC%
0
 
LVL 2

Expert Comment

by:un0ri
ID: 37830493
Is this happening on all your systems or just one?
0
 
LVL 1

Author Comment

by:ded2545
ID: 37832123
I have those exact settings (got from another post). I currently only have it set to work on my account before I turn it loose company wide (Windows 7). I know the policy is making it to my computer because the settings are adjusted in the screensaver setting. Plus, I did Group Policy Modeling and it shows up on my account as well. Very confused ..

Things i've tried:

1. Copying the "PolicyDefinitions" to the SYSVOL/Domain/Policies folder
2. Enforcing the policy

I attached an image of what the screensaver is showing on the computer.
Untitled.jpg
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 
LVL 21

Expert Comment

by:motnahp00
ID: 37832152
What value did you specify for "Force specific screen saver"? -> enabled | ?
0
 
LVL 1

Author Comment

by:ded2545
ID: 37832154
I tried c:\windows\system32\scrnsave.scr and just scrnsave.scr
0
 
LVL 2

Expert Comment

by:un0ri
ID: 37832157
Have you tested the screen saver you want to run directly on the system before adding it to a GPO?
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37832172
That file and path exists on every machine?
0
 
LVL 2

Expert Comment

by:un0ri
ID: 37832236
They would do for windows 7 it is the default blank screen saver.

If you set this up manually and not through a GPO does it work?

Have you got another box you can test this on?  You may have a process that is preventing the system from becoming idle.

http://support.microsoft.com/kb/913405/en-gb

Although this link talks about wireless devices the concept is the same.  

So... If you can test it manually, and test on another system that should confirm if it is just your system or a wider issue.
0
 
LVL 1

Author Comment

by:ded2545
ID: 37832249
It works without the policy in place. I'm only testing this on my laptop and that path does exist.
0
 
LVL 2

Expert Comment

by:un0ri
ID: 37832311
Was this a clean install of windows 7 or an upgrade from a previous version?
0
 
LVL 1

Author Comment

by:ded2545
ID: 37832312
unOri:

It can't be that because when I remove the policy and set it manually on the computer, the screen saver kicks and and locks the computer like the policy should. I'm going to try and re-enable the policy now and see if that works.
0
 
LVL 1

Author Comment

by:ded2545
ID: 37832315
It was a clean install. Upgrading from a previous version goes against my religion :)
0
 
LVL 2

Expert Comment

by:un0ri
ID: 37832342
:)

Disable the 3 GPOs, retest it to confirm that it is working locally and then set just the forced screen saver

See if that works, if it does set a time out here

 HKCU\Control Panel\Desktop\ScreenSaveTimeOut

See if it works.
0
 
LVL 1

Author Comment

by:ded2545
ID: 37832683
Definitely something screwy with the policy. Reset everything in the policy back to allow control for the user (confirmed and tested on workstation). Had to set the "force specific screen saver" to disabled because "not configured" grayed out the option. Tested it and set the screensaver to begin after 120 seconds and it worked (under user control, not group policy).

So now, I setup each policy as:

Enable screen saver: Enabled
Prevent changing screen saver: Disabled
Password protect the screen saver: Enabled
Screen saver timeout: Enabled (900 seconds)
Force specific screen saver: Disabled
Everything else: Not Configured

The policy works with one exception: it is stuck on 120 seconds that I tested with user control. The policy applied successfully (can see 15 min in the applet) but it switches to screen saver mode after 120 seconds. Checked in the registry (HKCU\Control Panel\Desktop\" and there was an entry for 120 seconds so I deleted it .. but that didn't do anything because it still turns on after 2 minutes.

Any other ideas??? Never thought this would be so difficult...
0
 
LVL 1

Author Comment

by:ded2545
ID: 37832717
Ok .. this is funny but it's not.

I set the group policy for "Screen saver timeout" back to Disabled to allow user control. When I look at the computer, it shows 2 minutes like I originally had it programmed for. So this proves that group policy DOES NOT change the value despite showing that it has. When I had the "screen saver timeout" set to 15 minutes, it showed up as 15 minutes on the computer!!

Am I missing something here??
0
 
LVL 2

Accepted Solution

by:
un0ri earned 500 total points
ID: 37832776
I have come across a number of articles where people are experiencing the same thing.  

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/9a30ebd0-c172-4685-9acf-843e8f1d7ab4

Another one with wireless mouse was causing the issue

http://absoblogginlutely.net/2010/02/windows-7-screensaver-not-kicking-in-fixed/

In the first case a reboot seemed to cement the problem, the second one required a full install of the mouse software (not just allowing the OS to apply base drivers) followed by a reboot.

When you changed the group policy, did you disable everything first, verify and then just apply the forced screen saver.

Also try a different default screen saver to see if any of them work.  Paths are below.

Bubbles.scr       C:\Windows\System32\Bubbles.scr
Mystify.scr       C:\Windows\System32\Mystify.scr
PhotoScreensaver.scr (Photos)       C:\Windows\System32\PhotoScreensaver.scr
Ribbons.scr       C:\Windows\System32\Ribbons.scr
scrnsave.scr (Blank)       C:\Windows\System32\scrnsave.scr
ssText3d.scr (3D Text)       C:\Windows\System32\ssText3d.scr
0
 
LVL 1

Author Comment

by:ded2545
ID: 37832842
I know it's not the mouse issue (laptop with nothing plugged in) plus it's kicking in too fast compared to not at all. Looks like the issue is exactly that of the first link. This has to be a Microsoft bug because a reboot did fix the issue.

Thanks for that link - if nothing else, I know I'm not going crazy!
0
 
LVL 2

Expert Comment

by:un0ri
ID: 37832893
Haha, glad it's working :)
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
extended monitor print screen 8 33
Export a GPO and import a GPO 3 43
exchange 2013 search-mailbox question 7 40
PowerShell .lastLogonTimestamp off 11 25
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question