enforce screen saver password

[Eugene]

Hi,

I am trying to enforce screen saver password to certain users in my domain.

I created a pwd.reg file which contains
REGEDIT4

[HKEY_CURRENT_USER\Control Panel\Desktop]
"SCRNSAVE.EXE"="C:\\WINNT\\system32\\logon.scr"
"ScreenSaveActive"="1"
"ScreenSaveTimeOut"="120"
"ScreenSaverIsSecure"="1"

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control
Panel\Desktop]
"ScreenSaverIsSecure"=dword:00000001

I added this line in the login script "regedit /s \\{server}\pwd.reg"

But I got this error during login "Cannot import \\{server}\pwd.reg : error
accessing regisrty"

Any way to get around this without giving users admin permission?
What is the "regedit /r" parameter used for? I tried adding the "/r"
parameter and pointed it to %username% and did not get the error, but it did
not change the registry as well.

Thanks.

 

[Mark Dormer]

Use Group Policy.

The settings for the screensaver are here

User Configuration--Administrative Templates--Control Panel--Display

Regards
Mark Dormer

 

[Eugene]

Hi Mark,

Thank for the quick reply.

Sorry, I forgot to mention I'm using a NT PDC. I using a mix environment.

I'm not familiar with NT policies. I tried using the System policy on my DC
but I can only prevent password from being remove, not enforcing it.

Thanks.

Use Group Policy.

The settings for the screensaver are here

User Configuration--Administrative Templates--Control Panel--Display

Regards
Mark Dormer

Hi,

I am trying to enforce screen saver password to certain users in my
domain.

I created a pwd.reg file which contains
REGEDIT4

[HKEY_CURRENT_USER\Control Panel\Desktop]
"SCRNSAVE.EXE"="C:\\WINNT\\system32\\logon.scr"
"ScreenSaveActive"="1"
"ScreenSaveTimeOut"="120"
"ScreenSaverIsSecure"="1"

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control
Panel\Desktop]
"ScreenSaverIsSecure"=dword:00000001

I added this line in the login script "regedit /s \\{server}\pwd.reg"

But I got this error during login "Cannot import \\{server}\pwd.reg :
error
accessing regisrty"

Any way to get around this without giving users admin permission?
What is the "regedit /r" parameter used for? I tried adding the "/r"
parameter and pointed it to %username% and did not get the error, but it
did
not change the registry as well.

Thanks.

 

[Eugene]

just in case anyone is interested...

I used a system policy to enforce the screen saver password instead.

you can find more info at MS KB article - 195655

Hi Mark,

Thank for the quick reply.

Sorry, I forgot to mention I'm using a NT PDC. I using a mix environment.

I'm not familiar with NT policies. I tried using the System policy on my DC
but I can only prevent password from being remove, not enforcing it.

Thanks.

Use Group Policy.

The settings for the screensaver are here

User Configuration--Administrative Templates--Control Panel--Display

Regards
Mark Dormer

Hi,

I am trying to enforce screen saver password to certain users in my
domain.

I created a pwd.reg file which contains
REGEDIT4

[HKEY_CURRENT_USER\Control Panel\Desktop]
"SCRNSAVE.EXE"="C:\\WINNT\\system32\\logon.scr"
"ScreenSaveActive"="1"
"ScreenSaveTimeOut"="120"
"ScreenSaverIsSecure"="1"

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control
Panel\Desktop]
"ScreenSaverIsSecure"=dword:00000001

I added this line in the login script "regedit /s \\{server}\pwd.reg"

But I got this error during login "Cannot import \\{server}\pwd.reg :
error
accessing regisrty"

Any way to get around this without giving users admin permission?
What is the "regedit /r" parameter used for? I tried adding the "/r"
parameter and pointed it to %username% and did not get the error, but it
did
not change the registry as well.

Thanks.