Link to home
Start Free TrialLog in
Avatar of itmoonlighter
itmoonlighter

asked on

Personalization Setting in GPO

We have a separate domain that only a couple of machines are on. It was recently recommended that we mirror the policy settings from our main network domain to this one. Everything seems to work fine except when I look under User Configuration-Policies-Administrative Templates-Control Panel, there is no Personalization folder to change settings. I'm specifically looking for the screen saver timeout and password protect the screen saver settings. This is a Server 2008 machine but I'm missing that folder for some reason.
Avatar of Santosh Gupta
Santosh Gupta

Hi,

Seems your group policy template is missing some policies. pls down load the template from Microsoft. http://www.microsoft.com/en-us/download/details.aspx?id=14355

Also you can use do following to find that settings.
1.Click Start, click Run, type mmc, and then click OK.
2.On the File menu, click Add/Remove Snap-in.
3.Click Add.
4.In the Available Stand Alone Snap-ins list, click Security Configuration and Analysis, click Add, click Close, and then click OK.
now you can check and configure your screen saver and other policies.
5.In the left pane, click Security Configuration and Analysis and view the instructions in the right pane.
6.Right-click Security Configuration and Analysis, and then click Open Database.
7.In the File name box, type the name of the database file, and then click Open.
8.Click the security template that you want to use, and then click Open to import the entries that are contained in the template to the database.
9.Right-click Security Configuration and Analysis in the left pane, and then click Configure Computer Now.
Avatar of itmoonlighter

ASKER

Thank you for the link. I downloaded it and installed it but I still don't see it in the Group Policy Editor.

I'm not sure what to use for the database file. Is there a way to find out?

What's weird is if I go to the screen saver settings on each PC, the time is set to go to screen saver at 10 minutes, which is what I want, but not to password protect it. The options are grayed out and can't be changed, so it's like they're getting the settings from somewhere.
For database, it will just create temp Database that You can delete any time.

To check it manually, pls see the registry.

    Click Start, and then click Run.
    In the Open box, type regedt32, and then click OK.
    In the Registry Editor window, locate the following registry key:
    HKEY_USERS\.DEFAULT\Control Panel\Desktop
    In the right pane, double-click ScreenSaveTimeOut.
    In the Edit String dialog box that appears, type the number of seconds after which you want the screen saver to start in the Value data box, and then click OK. For example, if you want the screen saver to start after 5 minutes, type 300.
    Click Exit on the File menu to quit Registry Editor.
Sorry, I'm confused. After I add the snap in and right click the Security and Analysis and do Open Database, I get an error when I type in a name that says it can't find that file. How do I create a db?
you need to put any name (not need to locate DB)
When I choose Open Database, I type in the name temp and then it brings up another screen to import templates. Where do I find a template to import?

Thanks.
Ohh my mistake,

go to run, type MMC, go to file menu, click "add-remove snap ins"

select and open "security templates", click Add, then press OK.

right click on path (showing at left) and select "new template", put the name of template.

expand and change your desired policy.

save that policy. it will give you INI file.

this the file that you need to open at this stage.

http://www.windowsecurity.com/articles-tutorials/misc_network_security/Understanding-Windows-Security-Templates.html
Thanks, I appreciate your help. I did all that but I still don't see the Personalization setting where I can set the screen saver timeout and password protection.
ASKER CERTIFIED SOLUTION
Avatar of Santosh Gupta
Santosh Gupta

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial