Solved

Personalization Setting in GPO

Posted on 2014-03-13
9
783 Views
Last Modified: 2014-03-14
We have a separate domain that only a couple of machines are on. It was recently recommended that we mirror the policy settings from our main network domain to this one. Everything seems to work fine except when I look under User Configuration-Policies-Administrative Templates-Control Panel, there is no Personalization folder to change settings. I'm specifically looking for the screen saver timeout and password protect the screen saver settings. This is a Server 2008 machine but I'm missing that folder for some reason.
0
Comment
Question by:itmoonlighter
  • 5
  • 4
9 Comments
 
LVL 13

Expert Comment

by:Santosh Gupta
Comment Utility
Hi,

Seems your group policy template is missing some policies. pls down load the template from Microsoft. http://www.microsoft.com/en-us/download/details.aspx?id=14355

Also you can use do following to find that settings.
1.Click Start, click Run, type mmc, and then click OK.
2.On the File menu, click Add/Remove Snap-in.
3.Click Add.
4.In the Available Stand Alone Snap-ins list, click Security Configuration and Analysis, click Add, click Close, and then click OK.
now you can check and configure your screen saver and other policies.
5.In the left pane, click Security Configuration and Analysis and view the instructions in the right pane.
6.Right-click Security Configuration and Analysis, and then click Open Database.
7.In the File name box, type the name of the database file, and then click Open.
8.Click the security template that you want to use, and then click Open to import the entries that are contained in the template to the database.
9.Right-click Security Configuration and Analysis in the left pane, and then click Configure Computer Now.
0
 

Author Comment

by:itmoonlighter
Comment Utility
Thank you for the link. I downloaded it and installed it but I still don't see it in the Group Policy Editor.

I'm not sure what to use for the database file. Is there a way to find out?

What's weird is if I go to the screen saver settings on each PC, the time is set to go to screen saver at 10 minutes, which is what I want, but not to password protect it. The options are grayed out and can't be changed, so it's like they're getting the settings from somewhere.
0
 
LVL 13

Expert Comment

by:Santosh Gupta
Comment Utility
For database, it will just create temp Database that You can delete any time.

To check it manually, pls see the registry.

    Click Start, and then click Run.
    In the Open box, type regedt32, and then click OK.
    In the Registry Editor window, locate the following registry key:
    HKEY_USERS\.DEFAULT\Control Panel\Desktop
    In the right pane, double-click ScreenSaveTimeOut.
    In the Edit String dialog box that appears, type the number of seconds after which you want the screen saver to start in the Value data box, and then click OK. For example, if you want the screen saver to start after 5 minutes, type 300.
    Click Exit on the File menu to quit Registry Editor.
0
 

Author Comment

by:itmoonlighter
Comment Utility
Sorry, I'm confused. After I add the snap in and right click the Security and Analysis and do Open Database, I get an error when I type in a name that says it can't find that file. How do I create a db?
0
Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

 
LVL 13

Expert Comment

by:Santosh Gupta
Comment Utility
you need to put any name (not need to locate DB)
0
 

Author Comment

by:itmoonlighter
Comment Utility
When I choose Open Database, I type in the name temp and then it brings up another screen to import templates. Where do I find a template to import?

Thanks.
0
 
LVL 13

Expert Comment

by:Santosh Gupta
Comment Utility
Ohh my mistake,

go to run, type MMC, go to file menu, click "add-remove snap ins"

select and open "security templates", click Add, then press OK.

right click on path (showing at left) and select "new template", put the name of template.

expand and change your desired policy.

save that policy. it will give you INI file.

this the file that you need to open at this stage.

http://www.windowsecurity.com/articles-tutorials/misc_network_security/Understanding-Windows-Security-Templates.html
0
 

Author Comment

by:itmoonlighter
Comment Utility
Thanks, I appreciate your help. I did all that but I still don't see the Personalization setting where I can set the screen saver timeout and password protection.
0
 
LVL 13

Accepted Solution

by:
Santosh Gupta earned 500 total points
Comment Utility
Hi,

Try to reset the screen saver through registry setting.
Go through the registry entry and change as per your requirement.

HKEY_CURRENT_USER\Control Panel\Desktop

http://www.windows-commandline.com/disable-screensaver-registry-settings/
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now