Re: Terminal Services Session Screen Saver possible to disable?



Hi,

Place your TS servers in a separate OU and create a GPO with the settings you want. Move your TS servers into this OU. Enable Loopback policy with the Replace option.

Add an entry for Deny Apply Group Policy for Domain Admins to the above GPO security so that your policies will not apply to admins that logon to the TS.

Loopback processing of Group Policy

http://support.microsoft.com/kb/231287

After you have completed the above users will have a different GPO applied when they logon to the TS but still have the current GPO applied when logging on to their local PC.

-TP

Version7 wrote:
Our problem is we have a user based group policy that has the
following settings,

Password protect the screen saver Enabled
Screen Saver Enabled
Screen Saver timeout Enabled
Number of seconds to wait to enable the Screen Saver
Seconds: 900

This locks our users computers after 10 minutes. Since this is a
user based policy this follows the user's when they log into the
several terminal servers. This becomes very annoying for the users
to have to unlock there TS session after 10 minutes when they just
unlocked there computer. Is there a way to superseed the User based
group policy and perm disable the Screen saver on the TS Servers? Or
maybe this is not the best solution and there is a better one.

We want to keep a policy in place that automatically locks the users
computers after 10 minutes however we dont want the terminal service
sessions to lock. Is this possible? Thanks
.



Relevant Pages

  • Re: Loopback Policy Not Taking Effect
    ... Have you rebooted your servers yet? ... Terminal Servers in the OU ... loopback GPO to the "Terminal Servers" OU but to the OU that holds my TS ... ad TS Lockdown Policy and assigned them mostly Computer ...
    (microsoft.public.windows.terminal_services)
  • Re: restricted groups frustration!
    ... Have you run GPMC Results wizard against one of the intended target servers to ensure they are actually processing that GPO and getting that particular setting. ... you could then enable security policy logging on one of the target servers to see what's up. ... If this is not the desired RSOP, you'll most likely want to create a new gpo with these settings in it and security filter it to 'Domain Computers', which avoids domain controllers. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cached GPOs
    ... seen to caching occurs when you're editing a GPO. ... Template policy to ... > It may have been that at one time when the users were off network they ... >>> would still have the screen saver tab hidden because none ...
    (microsoft.public.windows.group_policy)
  • Re: Automated logoff using Winexit.scr
    ... If a non-administrative user attemps to use the WinExit screen saver, ... You can use RegDACL to set these permissions in batch. ... are not servers in our domain. ... I have tried creating a group policy ...
    (microsoft.public.windows.group_policy)
  • Re: Screensaver Password Policy Doesnt Work
    ... the registry key modified by the ... GPO is not effective with Windows XP! ... Policy MMC. ... All users get screen saver but only some get passowrd protection. ...
    (microsoft.public.windowsxp.security_admin)