Windows 7 not locking after set period of time even though set in Server 2003 GPO

Posted on 2014-08-29
Last Modified: 2014-09-02
We have an SBS 2003 domain. I have a GPO that is called 'lockup'. In it, the following user configuration options have been set:-

Screen Saver - Enabled
Screen Saver Executable - %windir%\system32\rundll32.exe user32.dll,LockWorkStation
Password Protect on resume - Enabled
Screen Saver Timeout - 300

This GPO is set at the domain level, and is limited to the MYDOMAIN\Lockup group only.

I have a Windows 7 notebook on the domain with the primary user as a member of the MYDOMAIN\Lockup group, but the laptop does NOT lock after 5 minutes as I would hope.

I have run RSoP against his account on his machine, and I can see that the settings of my policy 'appear' to be in effect, but it just doesn't work.

The policy is enforced, and no other policies are overriding these settings.

Any ideas please?
Question by:Chris Millard
    LVL 14

    Accepted Solution

    Verify that the BIOS levels on the machine in question are up to date.

    Also, insure that even though the GPO is enforced, do a gpupdate /force from the command line and then a gpresults to insure it is being applied.

    If it is being applied, then verify that the registry setting is being changed in the registry.

    1. Open regedit
    2. Navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
    - If System key doesn't exist, create it
    3. Verify and/or create a DWORD 32-bit value and name it to DisableLockWorkstation
    4. Edit DisableLockWorkstation and enter 0 for Value data:
    LVL 17

    Author Comment

    by:Chris Millard
    Hi Brad,  

    I can't check the BIOS until Monday, but the other things you mentioned have already been done.

    LVL 38

    Expert Comment

    by:Hypercat (Deb)
    Not all settings in the Windows 2003 version of group policies will work with Windows 7.  Windows 7 uses a newer version of group policies.  If you're going to have more Windows 7 machines on your domain with a Windows 2003 server, you'll want to set your Windows 7 policies locally on one Windows 7 machine and then upload the Windows\PolicyDefinitions folder from that machine to your server. Then you would need to manage them from the GPMC installed on a Windows 7 workstation, not the server.  If you're just going to have this one Windows 7 machine on the domain, set the policy locally on that machine.
    LVL 10

    Expert Comment

    We recently had a machine with the same behaviour. All other machines abided by the policy, just this one wouldnt. Ultimately I found that the idle timer on this computer was never incrementing past 0.  I used an idle time viewer similar to .  Turns out the driver for our mouse was not installed and was causing the idle timer issue.
    LVL 17

    Author Closing Comment

    by:Chris Millard
    Updating the BIOS has resolved this issue. I don't claim to understand why though!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Article by: Lee
    Windows 7 Ultimate and Enterprise (and 2008 R2) introduced a new feature you may not be aware of - Boot from VHD.   Boot from VHD (or what Microsoft refers to asNative Boot allows you to install Windows to a VHD (Virtual Hard Disk) file that is t…
    If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
    This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.
    The viewer will learn how to download and install Comodo Backup on Windows 7. Comodo Backup is another solution for backing up your computer. It is free for local backup and online backup has differing amounts depending on storage required. In my op…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now