Solved

Group Policy to lock computer after idle time has been reached.

Posted on 2014-04-21
3
47,154 Views
2 Endorsements
Last Modified: 2016-01-18
Hello,

I'm running a Windows 2012R2 server with Windows 7 client workstations.

I need to enable a Group Policy to lock the client workstations so that they receive the Ctrl-Alt-Del prompt after 10 minutes of idle time.

Can the Experts please furnish me with the appropriate settings to allow for this to be enabled?  Also, would the Group Policy Object need to be linked to Computers OU or Users OU?

Thank you in advance.

Regards,
Real-Timer
2
Comment
Question by:realtimer
  • 2
3 Comments
 
LVL 28

Expert Comment

by:becraig
ID: 40013633
Sometimes an idle time might lead to a screen saver, there is a way to go directly to a lock screen.

Here is a quick howto:
http://prajwaldesai.com/lock-computers-in-domain-via-group-policy/

more info on locking the screen
http://www.bridgetonova.com/2007/11/how-to-lock-computers-when-idle-by.html


You can determine which OU you apply the GPO on
1
 
LVL 28

Accepted Solution

by:
becraig earned 500 total points
ID: 40013644
Detailed steps:
Open the Group Policy Management, right click on your domain and click on Create a GPO in this domain and link it here.
Provide a name to the policy such as Screensaver Policy and click on OK.


Right click the Screen saver policy and click on Edit.
The Group Policy Management Editor opens in a new window, expand User Configuration, expand Policies, expand Administrative Templates, expand Control Panel and click on Personalization.
We will configure the policy settings now.


Double click on Screen saver timeout.
This settings specifies the amount of time after which the screen saver must be launched.
Click on Enabled to enable this policy setting, and set the time after which the screen saver should appear.
In this example i will set the idle time to 60 seconds, which means if the computer is idle for 60 seconds the screen saver will be shown.  Click on Apply and OK.


Double click the policy setting Force specific screen saver.
This setting if enabled displays the screen saver specified in the policy setting.
Click on Enabled, provide the path where the screen saver file is located.
Click on Apply and OK.


Double click the setting Enable Screen saver, click on Enabled, this setting will enable the screen saver.
Before you enable this setting you must specify the screen saver executable path and screen saver timeout must be configured.


Double click the setting Password protect the screen saver and click on Enabled.
(This setting will make all the screen savers password protected.)
If this policy is not configured, then the password protection cannot be set on any screen saver.
For this setting to work correctly, make sure you have enabled the policy setting Enable screen saver and Screen saver timeout. Click on Apply and OK.

Reprinted from:
http://prajwaldesai.com/lock-computers-in-domain-via-group-policy/
1
 

Expert Comment

by:AJ1978
ID: 41418133
Dear IV

As you see from the screen shot the GP was done for users but applied to  computers object. You are saying that I should move the GP to be here instead? Please see update screenUpdated shot.
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

OfficeMate Freezes on login or does not load after login credentials are input.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now