Re: Screensaver passwords through GPO

Hello Simon,

Did you check with gpresult if the policy is really applied from the workstation? Or maybe there is another group policy that overrides your new created with this option?

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.



Hi, can anyone help me please...

We are looking to set up some additional security on the network and
one aspect is that we want to be able to lock machines on the network
if they have been inactive for over 15 mins

The way I have set this up is to create a GPO that automatically
activates the screensaver on the machines (through the User
Configuration\Admin Templates\Control Panel\Display section of the
policy) after 900 seconds, disables access to the screensaver tab for
users, and forces the 'logon.scr' screensaver to run, I have also set
the password protect option.

However, when the screensaver comes on then I move the mouse to get
back to the desktop, it does not ask me for a password so is not
locking the machine.

Is the 'password protect' option on the GPO not the same as the 'on
resume, password protect' option you get on the local machines (or is
this due to the fact that im testing it on an account with admin
privileges?)

If not, is there any way to set this so the screensaver locks the
machine without me having to manually set the option on every machine
on the LAN before applying this policy?

Thanks in Advance

Simon



.

Relevant Pages

  • Re: Group Policy
    ... We want to setup a policy in our domain where screensavers will come on and lockout after a certain amount of time. ... Maybe you can put the server and laptops and stuff that don't need those screensavers in one OU, machines that need it into another. ... create a policy with the screensaver configuration and link it to the OU with the screensaver macines (or just right-click the right OU in GPMC and select "Create and link GPO here". ... If you cannot seperate the machines, things get tricky and you'd have to use a sort of filtering with "Security Filtering": http://www.frickelsoft.net/blog/?p=28 or WMI filters... ...
    (microsoft.public.windows.server.active_directory)
  • Re: password protecting the screensaver
    ... Ive created a policy to lock down the desktop so the user can not make any ... I've created a 2nd policy to have the screensaver ... there's no option to password protect the screensaver. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy
    ... I have that GPO and default domain policy ... say 80 workstations with the password/lockout policy. ... GPO I gpedit and setup the screensaver settings and such and leave the ... Can you seperate the screensaver machines from the non-screensaver ...
    (microsoft.public.windows.server.active_directory)
  • Screensaver passwords through GPO
    ... aspect is that we want to be able to lock machines on the network if they ... disables access to the screensaver tab for users, ... Is the 'password protect' option on the GPO not the same as the 'on resume, ...
    (microsoft.public.win2000.group_policy)
  • Re: Screensaver wont start from GPO
    ... What happens if you go to the screen saver tab and try the button? ... > screensaver GPO to lock machines after 8 minutes and start the logon.scr ... > the policy and the timeout is set and greyed out as well. ... > but the screensaver never starts. ...
    (microsoft.public.windows.group_policy)
Loading