Windows 2008 AD w/ XP & 7 Clients, Looking to Lock Screen Saver Settings

RTM2007
RTM2007 used Ask the Experts™
on
Looking to, maybe through Group Policy, set a screen saver on end desktops and the settings and not have the user be able to change it (ex. any screen saver, time out 5 minutes, requires password when exiting)
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Greetings:

This should help you set a policy similar to what you are speaking to:

http://www.lockergnome.com/windows/2005/01/24/implement-a-password-protected-screen-saver-through-group-policy/
remmett70Network Manager
Commented:
The screen saver policy items are located under

User configuration > Administrative templates > Control Panel > Personalization
Here are the settings you want to enable:

User Configuration > Administrative Templates > Control Panel > Personalization

Enable Screen Saver -> Enabled
Screen saver timeout -> Enabled | 300
Password protect the screen saver -> Enabled
Acronis in Gartner 2019 MQ for datacenter backup

It is an honor to be featured in Gartner 2019 Magic Quadrant for Datacenter Backup and Recovery Solutions. Gartner’s MQ sets a high standard and earning a place on their grid is a great affirmation that Acronis is delivering on our mission to protect all data, apps, and systems.

Author

Commented:
I had it set at under GP Management. I added an object and assigned it to the relevant OUs (assigned it to computer OUs, should I have assigned it to a user OU?).

In the object, changed:

Enable screen saver to Enabled
Prevent changing screen saver to Enabled
Password protect the screen saver to Enabled
Screen saver timeout to Enabled
Force specific screen saver to Enabled

However still does seem to take (let GP update/force).
Yes, since this is a user-side policy, the user OU would be an appropriate location.

You can run the following to have policy take effect:

gpupdate /force /logoff /boot

Author

Commented:
Is there a way to tie this to machines vs. users?
remmett70Network Manager

Commented:
Yes.  You link the GPO to the OU with the users, because the setting is part of the User settings, but under the Scope tab of the policy, Security settings area.

Remove Authenticated users, and add the computers, or Group of computers you want to apply the policy to.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial