Solved

Screensaver timeout GPO no longer works on Windows 10

Posted on 2016-09-08
16
1,096 Views
Last Modified: 2016-09-17
The location is a school with computer labs. The workstations login as general student accounts so they stay logged in all day as the same account. Teachers do not want computers going to a lock screen forcing them to have students log back in during the day between classes.
Prior to Windows 10, this GPO worked great. Windows 10 appears to be ignoring the screensaver settings. I have not been able to locate a technical article that shows where the settings are in group policy that Windows 10 will actually apply that controls the screensaver timeout or lock screen timeout.

You can see all the details of the GPO in the attached document.

The GPO settings worked extremely well before the machines were upgraded to Windows 10. Now the screen saver and screen lock time settings are being completely ignored.
H--QPC-Clients-KCLS-ScreenSaverLock.pdf
0
Comment
Question by:Felicia King
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 9
  • 5
  • 2
16 Comments
 
LVL 55

Expert Comment

by:McKnife
ID: 41790125
We see no such behavior here. So how does it behave? What does it do after what time on battery/plugged?
0
 
LVL 4

Author Comment

by:Felicia King
ID: 41790137
The screen goes to the lock screen after about 15 - 20 minutes. When the student comes back to the PC, they have to move the mouse and then put in the password for the account that is already logged in. So they are effectively unlocking the screen.
I think the issue here is that the screensaver timeout settings in GPO for older OS do not seem to affect the lock screen settings in Windows 10, and I don't see where the Windows 10 lock screen settings exist in GPO.

I do have all the Windows 10 GPOs installed and I'm using GPO Central Store to ensure that all the Admin Templates and settings are available.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 41790169
Go over the settings here

https://technet.microsoft.com/en-us/itpro/windows/manage/windows-spotlight

User Configuration\Administrative Templates\Windows Components\Cloud Content\Configure Spotlight on lock screen
0
Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

 
LVL 4

Author Comment

by:Felicia King
ID: 41790181
When I go into the GPO, I can see other things related to Windows 10, so I know that the Win10 Admin templates are loaded, however, there is no Cloud Content section shown in the GPO. The machines are all Win10 Pro. I will check another AD environment to see if that Admin Template path to Cloud Content shows there.
0
 
LVL 4

Author Comment

by:Felicia King
ID: 41790192
I just checked gpedit.msc on a Windows 10 Pro machine as well as another AD environment (gpmc.msc) and Cloud Content is not a valid path in group policy as listed.
0
 
LVL 55

Expert Comment

by:McKnife
ID: 41790227
Which version of 10, 10240 still?
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 41790291
You need to install the latest ADMX files

https://www.microsoft.com/en-us/download/details.aspx?id=53430
0
 
LVL 55

Expert Comment

by:McKnife
ID: 41790376
The only thing different in 10 as compared to win7 in this respect is that if the screen is turned off as the power settings enforce, the session will also be locked. There are no new policies and I never had to configure spotlight.

I would use gpresult to verify what got applied and also check the corresponding registry values.
0
 
LVL 4

Author Comment

by:Felicia King
ID: 41790446
Installed Admx and Adml bundle into GPO Central Store per the pack from 8/5/2016.
https://www.microsoft.com/en-us/download/details.aspx?id=53430
Cloud Content is now a configurable option, but as McKnife indicates, there really are no settings in there that impact the screen timeout to lock option.
I had previously looked into the GP Results, but will do so again now that the new ADMX and ADML are in place.
0
 
LVL 4

Author Comment

by:Felicia King
ID: 41790503
Using both gpresult /H C:\Temp\GPResult.htm and rsop.msc both as the student account and as local admin indicates that GPO is processing properly. Also reviewing the settings on the workstation while logged in as the student account indicates that the screensaver timeout setting is coming through from GPO correctly. It shows screensaver timeout 480 minutes. We are going to gather more data from the teachers fresh in the morning to find out if the lock screen is still coming up instead of the desktop session staying logged in and unlocked.
0
 
LVL 4

Accepted Solution

by:
Felicia King earned 0 total points
ID: 41794577
I found that group policy was not processing properly in all the scenarios on the lab machines due to a GPO processing error from an Internet Explorer settings management policy. I unlinked that policy and then the screensaver timeout settings came across to all the machines reliably.
0
 
LVL 55

Expert Comment

by:McKnife
ID: 41794584
My suggestion was "I would use gpresult to verify what got applied" which had indeed "to do" with the solution. But nevermind, main thing is that it works :-)
0
 
LVL 4

Author Comment

by:Felicia King
ID: 41794592
I did not use GPResult. GPResult showed no errors. It showed that they were applied. Only using RSOP.msc exposed the problem.
GPResult /R did not expose the problem.
GPresult /H C:\Temp\GPResult.htm did not expose the problem.
0
 
LVL 55

Expert Comment

by:McKnife
ID: 41794599
Really? Astounding, since gpresult starts an rsop session as well. Sure that you did not overlook it?
0
 
LVL 4

Author Comment

by:Felicia King
ID: 41796734
GPResult did not produce errors. It was only RSOP.msc running once as local admin and then once as the student account that generated the error that identified the cause of the GPO processing failure. Even GPResult /H C:\Temp\GPResult.htm showed no errors in the HTM output. In fact, it stated that all the GPOs were processed and it showed that the settings had applied from the desired GPOs with the desired GPO being the winning GPO for the settings.
0
 
LVL 4

Author Closing Comment

by:Felicia King
ID: 41802910
Solution to the problem was found and it had nothing to do with any of the previous suggestions from other parties.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article summaries thoughts and ideas from two years of sustained use. It provides good reasoning to make the jump to Windows 10.
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question