Solved

Personalization Setting in GPO

Posted on 2014-03-13
9
839 Views
Last Modified: 2014-03-14
We have a separate domain that only a couple of machines are on. It was recently recommended that we mirror the policy settings from our main network domain to this one. Everything seems to work fine except when I look under User Configuration-Policies-Administrative Templates-Control Panel, there is no Personalization folder to change settings. I'm specifically looking for the screen saver timeout and password protect the screen saver settings. This is a Server 2008 machine but I'm missing that folder for some reason.
0
Comment
Question by:itmoonlighter
  • 5
  • 4
9 Comments
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39928027
Hi,

Seems your group policy template is missing some policies. pls down load the template from Microsoft. http://www.microsoft.com/en-us/download/details.aspx?id=14355

Also you can use do following to find that settings.
1.Click Start, click Run, type mmc, and then click OK.
2.On the File menu, click Add/Remove Snap-in.
3.Click Add.
4.In the Available Stand Alone Snap-ins list, click Security Configuration and Analysis, click Add, click Close, and then click OK.
now you can check and configure your screen saver and other policies.
5.In the left pane, click Security Configuration and Analysis and view the instructions in the right pane.
6.Right-click Security Configuration and Analysis, and then click Open Database.
7.In the File name box, type the name of the database file, and then click Open.
8.Click the security template that you want to use, and then click Open to import the entries that are contained in the template to the database.
9.Right-click Security Configuration and Analysis in the left pane, and then click Configure Computer Now.
0
 

Author Comment

by:itmoonlighter
ID: 39929094
Thank you for the link. I downloaded it and installed it but I still don't see it in the Group Policy Editor.

I'm not sure what to use for the database file. Is there a way to find out?

What's weird is if I go to the screen saver settings on each PC, the time is set to go to screen saver at 10 minutes, which is what I want, but not to password protect it. The options are grayed out and can't be changed, so it's like they're getting the settings from somewhere.
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39929110
For database, it will just create temp Database that You can delete any time.

To check it manually, pls see the registry.

    Click Start, and then click Run.
    In the Open box, type regedt32, and then click OK.
    In the Registry Editor window, locate the following registry key:
    HKEY_USERS\.DEFAULT\Control Panel\Desktop
    In the right pane, double-click ScreenSaveTimeOut.
    In the Edit String dialog box that appears, type the number of seconds after which you want the screen saver to start in the Value data box, and then click OK. For example, if you want the screen saver to start after 5 minutes, type 300.
    Click Exit on the File menu to quit Registry Editor.
0
 

Author Comment

by:itmoonlighter
ID: 39929238
Sorry, I'm confused. After I add the snap in and right click the Security and Analysis and do Open Database, I get an error when I type in a name that says it can't find that file. How do I create a db?
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39929272
you need to put any name (not need to locate DB)
0
 

Author Comment

by:itmoonlighter
ID: 39929398
When I choose Open Database, I type in the name temp and then it brings up another screen to import templates. Where do I find a template to import?

Thanks.
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39929461
Ohh my mistake,

go to run, type MMC, go to file menu, click "add-remove snap ins"

select and open "security templates", click Add, then press OK.

right click on path (showing at left) and select "new template", put the name of template.

expand and change your desired policy.

save that policy. it will give you INI file.

this the file that you need to open at this stage.

http://www.windowsecurity.com/articles-tutorials/misc_network_security/Understanding-Windows-Security-Templates.html
0
 

Author Comment

by:itmoonlighter
ID: 39930017
Thanks, I appreciate your help. I did all that but I still don't see the Personalization setting where I can set the screen saver timeout and password protection.
0
 
LVL 13

Accepted Solution

by:
Santosh Gupta earned 500 total points
ID: 39930125
Hi,

Try to reset the screen saver through registry setting.
Go through the registry entry and change as per your requirement.

HKEY_CURRENT_USER\Control Panel\Desktop

http://www.windows-commandline.com/disable-screensaver-registry-settings/
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now