Solved

Screen saver / lock the computer but only after 5PM on an SBS 2011 network

Posted on 2014-04-29
9
647 Views
Last Modified: 2014-05-05
with what little I know, I at least know that we can force a screen saver and lock the computer after x minutes using group policy.

But can this only take effect after 5PM (and before, say 8AM)? during the day, people don't want the screen locking after some amount of time when they get up.  But when they leave for the day, that would be good.

Is there a way with group policy or something else to say lock after x minutes if it's between 5PM and 8AM.  Otherwise, don't lock the computer
0
Comment
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 16

Assisted Solution

by:R. Andrew Koffron
R. Andrew Koffron earned 250 total points
ID: 40030687
Only way I can think of is to script the setting changes, than use a GPO to set a morning and evening batch file.

for scripting these settings check out.
http://windowsitpro.com/windows/q-how-can-batch-script-alter-users-screen-saver-and-wallpaper-settings-and-become-effective-
0
 
LVL 77

Accepted Solution

by:
Rob Williams earned 250 total points
ID: 40030759
No way I am aware of.

We usually just set the screen saver to 2 hours.  It locks eventually after work and people don't leave their desk for 2 hours at a time that often that if they have to enter a password it is a problem.

Alternatively on other sites we use a script to force a reboot.  If the user is logged in WSUS won't automatically apply updates, instead it keeps prompting and users click postpone.  A reboot addresses that, forces a clean boot, and locks the PC. It also forces closing all files so they can be backed up. Yes users could loose work, but they soon learn :-)
The reboot can be done using Microsoft's PSshutdown.  Just create a list of computers.  You can even set it so a user can abort the shut down if working late.  
http://technet.microsoft.com/en-ca/sysinternals/bb897541.aspx
0
 
LVL 53

Expert Comment

by:McKnife
ID: 40041024
@RobWill
Short comment on your WSUS strategy: there's a policy "No auto-restart with logged on users for scheduled automatic updates installations" which is not set by default. So by default, if installations run on a schedule, windows does automatically restart no matter who is logged on and that's what you want. So maybe you activated that policy unintentionally?

And for another solution: we could deploy a scheduled task that gets triggered on idle and runs only between certain times. That task simply locks the screen using the command
RunDll32.exe user32.dll,LockWorkStation
0
 

Author Comment

by:BeGentleWithMe-INeedHelp
ID: 40041166
Rob and R:  what about this at about 4 minutes in!?

http://m.youtube.com/watch?v=Hpaq216sLKY

Item level targeting!?

Sound exactly like what i need...  Is that something you know but don't like?  Not reliable method?  Didn't know about that?
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 77

Expert Comment

by:Rob Williams
ID: 40042303
@McKnife
You are quite right though I thought "No auto-restart with logged on users for scheduled automatic updates installations" was enabled by default.  Easily disabled if so.
Thanks,
--Rob
0
 

Author Comment

by:BeGentleWithMe-INeedHelp
ID: 40042329
you guys posting about WSUS, auto updates, etc.  Is that part of my question? Not that I mind, just don't know how it fits in : )
0
 
LVL 53

Expert Comment

by:McKnife
ID: 40042356
Oh, I hope you read my whole comment. I wouldn't post any side comments after a question is closed if they are not relevant. I gave you another alternative solution.
0
 

Author Comment

by:BeGentleWithMe-INeedHelp
ID: 40042385
Sorry!  What do you guys think of 'item level targeting'?  Obscure part of GP?
0
 
LVL 53

Expert Comment

by:McKnife
ID: 40042583
Watched your video. Yes, of course that's another quite painless way.
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
laptop problem 21 93
smartboard connectivity and software 6 34
Windows 7s template 4 36
Unable to add an AD Group to a an Computer Account as local system 2 24
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now