Solved

Personalization Setting in GPO

Posted on 2014-03-13
9
1,055 Views
Last Modified: 2014-03-14
We have a separate domain that only a couple of machines are on. It was recently recommended that we mirror the policy settings from our main network domain to this one. Everything seems to work fine except when I look under User Configuration-Policies-Administrative Templates-Control Panel, there is no Personalization folder to change settings. I'm specifically looking for the screen saver timeout and password protect the screen saver settings. This is a Server 2008 machine but I'm missing that folder for some reason.
0
Comment
Question by:itmoonlighter
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39928027
Hi,

Seems your group policy template is missing some policies. pls down load the template from Microsoft. http://www.microsoft.com/en-us/download/details.aspx?id=14355

Also you can use do following to find that settings.
1.Click Start, click Run, type mmc, and then click OK.
2.On the File menu, click Add/Remove Snap-in.
3.Click Add.
4.In the Available Stand Alone Snap-ins list, click Security Configuration and Analysis, click Add, click Close, and then click OK.
now you can check and configure your screen saver and other policies.
5.In the left pane, click Security Configuration and Analysis and view the instructions in the right pane.
6.Right-click Security Configuration and Analysis, and then click Open Database.
7.In the File name box, type the name of the database file, and then click Open.
8.Click the security template that you want to use, and then click Open to import the entries that are contained in the template to the database.
9.Right-click Security Configuration and Analysis in the left pane, and then click Configure Computer Now.
0
 

Author Comment

by:itmoonlighter
ID: 39929094
Thank you for the link. I downloaded it and installed it but I still don't see it in the Group Policy Editor.

I'm not sure what to use for the database file. Is there a way to find out?

What's weird is if I go to the screen saver settings on each PC, the time is set to go to screen saver at 10 minutes, which is what I want, but not to password protect it. The options are grayed out and can't be changed, so it's like they're getting the settings from somewhere.
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39929110
For database, it will just create temp Database that You can delete any time.

To check it manually, pls see the registry.

    Click Start, and then click Run.
    In the Open box, type regedt32, and then click OK.
    In the Registry Editor window, locate the following registry key:
    HKEY_USERS\.DEFAULT\Control Panel\Desktop
    In the right pane, double-click ScreenSaveTimeOut.
    In the Edit String dialog box that appears, type the number of seconds after which you want the screen saver to start in the Value data box, and then click OK. For example, if you want the screen saver to start after 5 minutes, type 300.
    Click Exit on the File menu to quit Registry Editor.
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 

Author Comment

by:itmoonlighter
ID: 39929238
Sorry, I'm confused. After I add the snap in and right click the Security and Analysis and do Open Database, I get an error when I type in a name that says it can't find that file. How do I create a db?
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39929272
you need to put any name (not need to locate DB)
0
 

Author Comment

by:itmoonlighter
ID: 39929398
When I choose Open Database, I type in the name temp and then it brings up another screen to import templates. Where do I find a template to import?

Thanks.
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39929461
Ohh my mistake,

go to run, type MMC, go to file menu, click "add-remove snap ins"

select and open "security templates", click Add, then press OK.

right click on path (showing at left) and select "new template", put the name of template.

expand and change your desired policy.

save that policy. it will give you INI file.

this the file that you need to open at this stage.

http://www.windowsecurity.com/articles-tutorials/misc_network_security/Understanding-Windows-Security-Templates.html
0
 

Author Comment

by:itmoonlighter
ID: 39930017
Thanks, I appreciate your help. I did all that but I still don't see the Personalization setting where I can set the screen saver timeout and password protection.
0
 
LVL 13

Accepted Solution

by:
Santosh Gupta earned 500 total points
ID: 39930125
Hi,

Try to reset the screen saver through registry setting.
Go through the registry entry and change as per your requirement.

HKEY_CURRENT_USER\Control Panel\Desktop

http://www.windows-commandline.com/disable-screensaver-registry-settings/
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Suggested Courses

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question