Solved

Group Policy to lock computer after idle time has been reached.

Posted on 2014-04-21
3
48,431 Views
2 Endorsements
Last Modified: 2016-01-18
Hello,

I'm running a Windows 2012R2 server with Windows 7 client workstations.

I need to enable a Group Policy to lock the client workstations so that they receive the Ctrl-Alt-Del prompt after 10 minutes of idle time.

Can the Experts please furnish me with the appropriate settings to allow for this to be enabled?  Also, would the Group Policy Object need to be linked to Computers OU or Users OU?

Thank you in advance.

Regards,
Real-Timer
2
Comment
Question by:realtimer
  • 2
3 Comments
 
LVL 29

Expert Comment

by:becraig
ID: 40013633
Sometimes an idle time might lead to a screen saver, there is a way to go directly to a lock screen.

Here is a quick howto:
http://prajwaldesai.com/lock-computers-in-domain-via-group-policy/

more info on locking the screen
http://www.bridgetonova.com/2007/11/how-to-lock-computers-when-idle-by.html


You can determine which OU you apply the GPO on
1
 
LVL 29

Accepted Solution

by:
becraig earned 500 total points
ID: 40013644
Detailed steps:
Open the Group Policy Management, right click on your domain and click on Create a GPO in this domain and link it here.
Provide a name to the policy such as Screensaver Policy and click on OK.


Right click the Screen saver policy and click on Edit.
The Group Policy Management Editor opens in a new window, expand User Configuration, expand Policies, expand Administrative Templates, expand Control Panel and click on Personalization.
We will configure the policy settings now.


Double click on Screen saver timeout.
This settings specifies the amount of time after which the screen saver must be launched.
Click on Enabled to enable this policy setting, and set the time after which the screen saver should appear.
In this example i will set the idle time to 60 seconds, which means if the computer is idle for 60 seconds the screen saver will be shown.  Click on Apply and OK.


Double click the policy setting Force specific screen saver.
This setting if enabled displays the screen saver specified in the policy setting.
Click on Enabled, provide the path where the screen saver file is located.
Click on Apply and OK.


Double click the setting Enable Screen saver, click on Enabled, this setting will enable the screen saver.
Before you enable this setting you must specify the screen saver executable path and screen saver timeout must be configured.


Double click the setting Password protect the screen saver and click on Enabled.
(This setting will make all the screen savers password protected.)
If this policy is not configured, then the password protection cannot be set on any screen saver.
For this setting to work correctly, make sure you have enabled the policy setting Enable screen saver and Screen saver timeout. Click on Apply and OK.

Reprinted from:
http://prajwaldesai.com/lock-computers-in-domain-via-group-policy/
1
 

Expert Comment

by:AJ1978
ID: 41418133
Dear IV

As you see from the screen shot the GP was done for users but applied to  computers object. You are saying that I should move the GP to be here instead? Please see update screenUpdated shot.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A quick guide on how to use Group Policy to create a custom power plan and set it active on Windows 7.
On some Windows 7 (SP1) computers, Windows Update becomes super slow even the computer is reasonably fast.  There's one solution that seemed to have worked well for me (after trying a few other suggested solutions).
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now