Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Personalization Setting in GPO

Posted on 2014-03-13
9
Medium Priority
?
1,233 Views
Last Modified: 2014-03-14
We have a separate domain that only a couple of machines are on. It was recently recommended that we mirror the policy settings from our main network domain to this one. Everything seems to work fine except when I look under User Configuration-Policies-Administrative Templates-Control Panel, there is no Personalization folder to change settings. I'm specifically looking for the screen saver timeout and password protect the screen saver settings. This is a Server 2008 machine but I'm missing that folder for some reason.
0
Comment
Question by:itmoonlighter
  • 5
  • 4
9 Comments
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39928027
Hi,

Seems your group policy template is missing some policies. pls down load the template from Microsoft. http://www.microsoft.com/en-us/download/details.aspx?id=14355

Also you can use do following to find that settings.
1.Click Start, click Run, type mmc, and then click OK.
2.On the File menu, click Add/Remove Snap-in.
3.Click Add.
4.In the Available Stand Alone Snap-ins list, click Security Configuration and Analysis, click Add, click Close, and then click OK.
now you can check and configure your screen saver and other policies.
5.In the left pane, click Security Configuration and Analysis and view the instructions in the right pane.
6.Right-click Security Configuration and Analysis, and then click Open Database.
7.In the File name box, type the name of the database file, and then click Open.
8.Click the security template that you want to use, and then click Open to import the entries that are contained in the template to the database.
9.Right-click Security Configuration and Analysis in the left pane, and then click Configure Computer Now.
0
 

Author Comment

by:itmoonlighter
ID: 39929094
Thank you for the link. I downloaded it and installed it but I still don't see it in the Group Policy Editor.

I'm not sure what to use for the database file. Is there a way to find out?

What's weird is if I go to the screen saver settings on each PC, the time is set to go to screen saver at 10 minutes, which is what I want, but not to password protect it. The options are grayed out and can't be changed, so it's like they're getting the settings from somewhere.
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39929110
For database, it will just create temp Database that You can delete any time.

To check it manually, pls see the registry.

    Click Start, and then click Run.
    In the Open box, type regedt32, and then click OK.
    In the Registry Editor window, locate the following registry key:
    HKEY_USERS\.DEFAULT\Control Panel\Desktop
    In the right pane, double-click ScreenSaveTimeOut.
    In the Edit String dialog box that appears, type the number of seconds after which you want the screen saver to start in the Value data box, and then click OK. For example, if you want the screen saver to start after 5 minutes, type 300.
    Click Exit on the File menu to quit Registry Editor.
0
Configuration Guide and Best Practices

Read the guide to learn how to orchestrate Data ONTAP, create application-consistent backups and enable fast recovery from NetApp storage snapshots. Version 9.5 also contains performance and scalability enhancements to meet the needs of the largest enterprise environments.

 

Author Comment

by:itmoonlighter
ID: 39929238
Sorry, I'm confused. After I add the snap in and right click the Security and Analysis and do Open Database, I get an error when I type in a name that says it can't find that file. How do I create a db?
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39929272
you need to put any name (not need to locate DB)
0
 

Author Comment

by:itmoonlighter
ID: 39929398
When I choose Open Database, I type in the name temp and then it brings up another screen to import templates. Where do I find a template to import?

Thanks.
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39929461
Ohh my mistake,

go to run, type MMC, go to file menu, click "add-remove snap ins"

select and open "security templates", click Add, then press OK.

right click on path (showing at left) and select "new template", put the name of template.

expand and change your desired policy.

save that policy. it will give you INI file.

this the file that you need to open at this stage.

http://www.windowsecurity.com/articles-tutorials/misc_network_security/Understanding-Windows-Security-Templates.html
0
 

Author Comment

by:itmoonlighter
ID: 39930017
Thanks, I appreciate your help. I did all that but I still don't see the Personalization setting where I can set the screen saver timeout and password protection.
0
 
LVL 13

Accepted Solution

by:
Santosh Gupta earned 2000 total points
ID: 39930125
Hi,

Try to reset the screen saver through registry setting.
Go through the registry entry and change as per your requirement.

HKEY_CURRENT_USER\Control Panel\Desktop

http://www.windows-commandline.com/disable-screensaver-registry-settings/
0

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

824 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question