Link to home
Start Free TrialLog in
Avatar of philb19
philb19

asked on

require a password on wakeup AND/OR screensaver password

We are having an issue where we think win7 devices go to sleep and then users (some) cant log back in - invalid username and password - a reboot fixes or sometimes switch user.

We have require a password on wakeup set in power settings - We also have a screen saver password. I would like to turn of the require a password on wakeup - My question is whats the point if any of having them both - the screen locks (screen saver) and the user has to log in.. Why then would you also need a wakeup from sleep password - is there any reason to have them both?  thanks
Avatar of arnold
arnold
Flag of United States of America image

when the system wakes up look at whether the default user prompt is a domain or a local account promote looking at the login option.
If your suspend interval is longer than your screen saver (or monitor off) interval, then you need them both. For desktop machines, I do not suspend, just let the screen go black.  For laptops on AC I do not suspend either.

We are having an issue where we think win7 devices go to sleep and then users (some) cant log back in  <-- That does not happen - my own machines or clients.

Are you very sure that someone else did not use the machine and walk away?
Someone else the username/password prompt ......... Do you have a switch user option?  The unlock might be from a vendor tool versus windows which if that is the case disable tge password prompt/requirement in the vendor tool interface.
Avatar of philb19
philb19

ASKER

Thanks  all.    no noone else is logging in.   1 user each time     John Hurst   I still don't see why you need both if the screen saver is say 10 minutes non activity and requires password to login. Then what point use of power sleep wakeup if it too prompts after non activity after 20 minutes?  The password prompt is already in place from the 10 minutes screen saver ? What am I missing?
If your sleep time and monitor off time are the same, you do not need both.

My laptop suspend time is 2 hours - much longer than my screen off time.
Avatar of philb19

ASKER

When you say monitor off. Are you referring to screen saver password ?  There not the same the power save is after 30 min non activity and the screen saver. Password after 10 min so given they are not the same and if the user is printed anyway from the screen saver there is no point for the sleep power password - correct?
Avatar of philb19

ASKER

Prompted not  printed sorry
Monitor off (flat screen) is the same interval for me as screen saver of old (CRT screens). Both are / were 5 or 10 minutes. Suspend is 120 minutes.  

Monitor off is better than screen savers for flat screens. I just let them go black.
When password on wakes enabled, that applies to access including when screen saver kicked in.

Deals with password to resume access.
Avatar of philb19

ASKER

Sorry still dont see the point - If screen saver password is enabled then it "by itself" prompts for a login

There is no point in putting a wakeup from power save  password as well  as the user is already prompted from the screen saver - the screen saver setting applies first in any case
Am i missing something?
As I noted, there is no need for both if the time intervals are near. Just use the screen saver password.
The issue you seem to point to deals with the password prompt not allowing the resumption of the session, pointing to a prompt that is not common.

Yes, one does not need both especially if the wake up is/has a password preconfigured versus relying on user authentication to resume....
Avatar of philb19

ASKER

thanks the preconfigured password would be the cached credentials from the screen save locked screen - yes?  As opposed to the wake up from power save which requres user reauthentication

Im hoping if i turn off the prompt for password after wake from power save I might resolve
In the Advanced Power Properties (Windows function) for the plan, see if you can set Require Password to NO . My machine is set only to YES  and then accordingly, I do not use a screen saver password (no need). This is the reverse of what you want.
When the requirement is enforced by windows, the prompt is awindows logon interface, specifying the user who gas the session with the password prompt, windows 7 and newer allow the switch user.
To prompt you are looking at if it does not include the ad domain would require the entry of domain\username password....

I would leave the require password to resume from screen saver.

Is the prompt from power save us that a manufacturer of the system tool?
@philb19  - It may ultimately not be feasible to remove the wake up password. I cannot (Windows has a password, BIOS has 2 passwords, and so on).

So if you just want one, choose the wake up password. Otherwise have both (modest inconvenience).
Avatar of philb19

ASKER

not manufacture   require a password on wakeup   standard in power settings
Avatar of philb19

ASKER

not achievable?   it seems to be a local group policy
I have no Group Policy affecting my power settings. I have regular suspend, hybrid sleep (almost OFF), BIOS passwords and so on. So I cannot have "no" wake up password.
Avatar of philb19

ASKER

computer policy
system
power management
sleep settings

heres the help from it

Specifies whether or not the user is prompted for a password when the system resumes from sleep.

If you enable this policy, or if it is not configured, the user is prompted for a password when the system resumes from sleep.

If you disable this policy, the user is not prompted for a password when the system resumes from sleep
ASKER CERTIFIED SOLUTION
Avatar of arnold
arnold
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of philb19

ASKER

Thanks all - this was as it turns out not from power sleep. This was due to multiple types of DCs and DES encryption - we had mixed DC 2008 2008 r2 and 2012 r2   - it seemed that when users were back to loggin in from sleep theuy must have been hitting the  2012 r2 KDC and encrypting with des encryption and 2012 unable to decrypt (no support for DES) - we diabled encryption types for group policy of clients - so that des cannot be used - AES used and no longer prompts