Solved

server 2003  - Lock domain PCs after a set time.

Posted on 2013-12-04
8
413 Views
Last Modified: 2013-12-09
Hi,

My domain server is 2003 and my clients are XP.

I want to lock the the PC after a set amount of inactivity. So say, after 10 mins of inactivity  the computer would lock and require the user to re-insert their password. I wanted the users to manually lock their PCs if they left their PC, but this did not happen, so therefore I need to sort something at the back end.

Would group policy the solution? if so can someone explain to a novice how to set this?
0
Comment
Question by:APC_40
8 Comments
 
LVL 6

Accepted Solution

by:
donnk earned 333 total points
ID: 39696288
make a new GPO, link it to your PC's container and edit:

User Settings > Administrative Templates > Control Panel > Personalization > Screen saver timeout and Password protect the screen saver
0
 

Author Comment

by:APC_40
ID: 39696331
Sorry, i don't think i was entirely clear, I only want control- ald -delete to appear and for the user to have to manually unlock the PC after say 30 mins. I don't have any requirement for a screen saver.
0
 
LVL 6

Expert Comment

by:donnk
ID: 39696422
thats ok, screensaver = microsoft speak for lock da screen )
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:APC_40
ID: 39696480
Thanks for clearing that up :)

So I'd so this from within AD rather from GPEDIT? Like this - Locate the computers OU and then add a new group policy object there as you described in your original post  and enforce it.
0
 
LVL 16

Assisted Solution

by:Dirk Mare
Dirk Mare earned 167 total points
ID: 39696491
Click "Start." Type "Gpedit.msc" into the search box at the bottom of the Start menu. Press "Enter."

Click "Yes" in the User Account Control prompt window, if one appears.

Navigate to the "User Configuration\Administrative Templates\Control Panel\Personalization" folder in the left pane of the Group Policy window.

Double-click the "Password Protect the Screen Saver" setting in the right pane of the Group Policy Editor window.

Click "Enabled." Click "OK."

Double-click the "Screen Saver Timeout" setting in the right pane.

Click "Enabled."

Type the number of seconds you want to lock the PC after into the "Seconds" box. For example, type "600" if you want to lock the PC after 10 minutes.

Click "OK."
0
 
LVL 6

Assisted Solution

by:donnk
donnk earned 333 total points
ID: 39696610
1. Make a GPO per my post using group policy manager.

2. Link this GPO to either the whole domain or the specific container containing the computers you want it applied to .
0
 
LVL 57

Expert Comment

by:giltjr
ID: 39699997
APC_40,  just as a F.Y.I, Microsoft OS's are not mainframe operating systems so please don't add mainframe operating systems to anything dealing with Windows OS's.
0
 

Author Closing Comment

by:APC_40
ID: 39706197
Excellent thanks. GPO created and linked to an OU
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As a business owner, there are many things that keep you up at night. Profit margins, employee retention, human resource protocols, whether your product or service will remain competitive. When you own or manage a technology company that operates la…
February 24, 2017 — On February 23, Travis Ormandy, a vulnerability researcher at Google, reported on Twitter (https://twitter.com/taviso/status/834900838837411840) that massive stores of data have been leaked by CloudFlare, a company that provide…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question