Link to home
Start Free TrialLog in
Avatar of RTM2007
RTM2007Flag for Afghanistan

asked on

Windows 2008 AD w/ XP & 7 Clients, Looking to Lock Screen Saver Settings

Looking to, maybe through Group Policy, set a screen saver on end desktops and the settings and not have the user be able to change it (ex. any screen saver, time out 5 minutes, requires password when exiting)
SOLUTION
Avatar of bill_lynch
bill_lynch
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of remmett70
remmett70
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of RTM2007

ASKER

I had it set at under GP Management. I added an object and assigned it to the relevant OUs (assigned it to computer OUs, should I have assigned it to a user OU?).

In the object, changed:

Enable screen saver to Enabled
Prevent changing screen saver to Enabled
Password protect the screen saver to Enabled
Screen saver timeout to Enabled
Force specific screen saver to Enabled

However still does seem to take (let GP update/force).
Yes, since this is a user-side policy, the user OU would be an appropriate location.

You can run the following to have policy take effect:

gpupdate /force /logoff /boot
Avatar of RTM2007

ASKER

Is there a way to tie this to machines vs. users?
Yes.  You link the GPO to the OU with the users, because the setting is part of the User settings, but under the Scope tab of the policy, Security settings area.

Remove Authenticated users, and add the computers, or Group of computers you want to apply the policy to.