Change restricted user's default screensaver timeout, how??

[tlyczko]

I am configuring a notebook for one of our staff. The notebook has a
local machine account administrator (Administrators group) and one
domain user account (e.g. domainuser.DOMAIN) set up as a restricted
user on the XP notebook.

HOW do I set the domain user's screensaver timeout to be 360 seconds (6
minutes), not 30 minutes??

It is always grayed out for the restricted user.

I have changed every registry value I could find and changed every
Group Policy setting I could find, all to no avail.

I also tried giving the domain user account permissions to change the
specific registry setting that is stuck at 1800, to no avail.

I tried temporarily moving the domain user into the Administrators
group, but this was only a temporary fix.

I also tried giving Users and Restricted permissions to the particular
registry setting, but this did not "stick," I don't know why.

I am sure there is a straightforward answer and I would appreciate your
help.

Thank you, Tom

 

[Asher_N]

I am configuring a notebook for one of our staff. The notebook has a
local machine account administrator (Administrators group) and one
domain user account (e.g. domainuser.DOMAIN) set up as a restricted
user on the XP notebook.

HOW do I set the domain user's screensaver timeout to be 360 seconds (6
minutes), not 30 minutes??

It is always grayed out for the restricted user.

I have changed every registry value I could find and changed every
Group Policy setting I could find, all to no avail.

I also tried giving the domain user account permissions to change the
specific registry setting that is stuck at 1800, to no avail.

I tried temporarily moving the domain user into the Administrators
group, but this was only a temporary fix.

I also tried giving Users and Restricted permissions to the particular
registry setting, but this did not "stick," I don't know why.

I am sure there is a straightforward answer and I would appreciate your
help.

Thank you, Tom

Group Policy.

User->Admin->Control Panel->Display->Screen Saver Timeout

 

[Carey Frisch [MVP]]

Install and configure this:

Microsoft Shared Computer Toolkit for Windows XP
http://www.microsoft.com/downloads/...56-e3da-42ea-857d-92b716077a84&displaylang=en

--
Carey Frisch
Microsoft MVP
Windows - Shell/User
Microsoft Community Newsgroups
news://msnews.microsoft.com/

-------------------------------------------------------------------------------------------

:

| I am configuring a notebook for one of our staff. The notebook has a
| local machine account administrator (Administrators group) and one
| domain user account (e.g. domainuser.DOMAIN) set up as a restricted
| user on the XP notebook.
|
| HOW do I set the domain user's screensaver timeout to be 360 seconds (6
| minutes), not 30 minutes??
|
| It is always grayed out for the restricted user.
|
| I have changed every registry value I could find and changed every
| Group Policy setting I could find, all to no avail.
|
| I also tried giving the domain user account permissions to change the
| specific registry setting that is stuck at 1800, to no avail.
|
| I tried temporarily moving the domain user into the Administrators
| group, but this was only a temporary fix.
|
| I also tried giving Users and Restricted permissions to the particular
| registry setting, but this did not "stick," I don't know why.
|
| I am sure there is a straightforward answer and I would appreciate your
| help.
|
| Thank you, Tom

 

[tlyczko]

I already did this, it did not work. Thank you, Tom

 

[tlyczko]

I know about the Shared Computer Kit, but it seems to assume one is
starting from scratch with installing XP, etc.

I am reconfiguring an XP notebook that came from Dell with no installer
CD (they're supposed to send me one but i am not hopeful it will
arrive)...so I worked on re-configuring the existing setup rather than
re-installing from scratch etc.

And I am unfortunately behind schedule with the notebook so several
more days setting everything up again is not really an option.

I just need the timeout value fixed for the one user without making her
an Admin user, restricted is better for protecting from malware, etc.

Thank you, Tom

 

[tlyczko]

Clarification: "I already did this, it did not work. Thank you, Tom"
means that I already tried the Group Policy suggestion from Asher_N
*before* I posted to these NGs.

I explained what I have already tried to do, but without success.

Thank you, Tom

 

[Asher_N]

Look at the Application Event log for that workstation. Make sure the group
policy is applied. Better yet, download the Group Policy Management snap-in
from MS. it will allow you tho see the resulting GPOs for any user on any
wkstn. I use those settings here and they always work. Something may be
either blocking the GPO or overiding it. Also try to run GPRESULTS from te
workstation.

 

[Asher_N]

As a quick and dirty, make 'Everyone' a member of the local admin group,
logon as the user and set the timout. Remove 'Everyone' from the admin
group.

 

[tlyczko]

Hi Asher, thank you for responding, I will try your QED solution first
and hopefully I don't have to use your longer suggestion.

Thank you, Tom

 

[Asher_N]

Hi Asher, thank you for responding, I will try your QED solution first
and hopefully I don't have to use your longer suggestion.

Thank you, Tom

You should still try to troubleshoot why the policy does not get applied. A
quick fix only removes the symptom, not the cause. You don't want to rely
on wotkarounds for every problem and every machine that you set up.

 

[tlyczko]

I found it in 'Default Domain Users' on our DC, changed that to 10
minutes and that did the trick. I can re-adjust it any time...Thank
you, Tom

 

[Asher_N]

I found it in 'Default Domain Users' on our DC, changed that to 10
minutes and that did the trick. I can re-adjust it any time...Thank
you, Tom

Glad it worked out. Download this:

http://www.microsoft.com/downloads/details.aspx?FamilyId=0A6D4C24-8CBD-
4B35-9272-DD3CBFC81887&displaylang=en

The GPMC has saved me hours of tracking down why a policy does not apply.
For any given wkstn/user combo, it can show you which settings were
applied, and which GPO they came from.

 

[tlyczko]

Thank you for the download link! tom