Locking down screensaver

[Guest]

Without using GPO, what registry settings do I need to modify to change the
screensaver and disable a user from changing it? I also have restricted
users that I need to be able to modify.

Is there also a way to change the default settings for new users (Perhaps in
the HKEY_Default_users key?)

I believe I have found some of the settings but I am not 100% sure if I have
all the settings needed.


The keys that I have found are:

[HKEY_CURRENT_USER\Control Panel\Desktop]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy
Objects\{03C4EAA3-A263-4602-929F-A41DD45BE413}User\Software\Policies\Microsoft\Windows\Control
Panel\Desktop]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control
Panel\Desktop]

[HKEY_USERS\S-1-5-21-4170565485-3653949685-3052517836-1113\Software\Microsoft\Windows\CurrentVersion\Group
Policy
Objects\{03C4EAA3-A263-4602-929F-A41DD45BE413}User\Software\Policies\Microsoft\Windows\Control
Panel\Desktop]

[HKEY_USERS\S-1-5-21-4170565485-3653949685-3052517836-1113\Software\Policies\Microsoft\Windows\Control
Panel\Desktop]



I know that some of the settings are from the GPO that I created but I can
not use a local GPO

Many thanks!

 

[Spinner]

Karl, if your trying to do this on NT 4, which you mentioned in another
post, don't try mucking around in the registry blindly. Simply use the
Policy editor that comes with NT4 or 2000 server. You can use it to make
direct changes to the registry of a target machine without actually using
policies.

Check out this link for more info.

http://search.microsoft.com/search/results.aspx?st=b&na=88&View=en-us&qu=policy+editor

Without using GPO, what registry settings do I need to modify to change the
screensaver and disable a user from changing it? I also have restricted
users that I need to be able to modify.

Is there also a way to change the default settings for new users (Perhaps in
the HKEY_Default_users key?)

I believe I have found some of the settings but I am not 100% sure if I have
all the settings needed.


The keys that I have found are:

[HKEY_CURRENT_USER\Control Panel\Desktop]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy
Objects\{03C4EAA3-A263-4602-929F-A41DD45BE413}User\Software\Policies\Microso
ft\Windows\Control

Panel\Desktop]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control
Panel\Desktop]

[HKEY_USERS\S-1-5-21-4170565485-3653949685-3052517836-1113\Software\Microsof
t\Windows\CurrentVersion\Group

Policy

Objects\{03C4EAA3-A263-4602-929F-A41DD45BE413}User\Software\Policies\Microso
ft\Windows\Control

Panel\Desktop]

[HKEY_USERS\S-1-5-21-4170565485-3653949685-3052517836-1113\Software\Policies
\Microsoft\Windows\Control
Panel\Desktop]



I know that some of the settings are from the GPO that I created but I can
not use a local GPO

Many thanks!

 

[Kelly]

For XP:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Control Panel\Desktop]
"ScreenSaverIsSecure"="1"
"ScreenSaveActive"="0"

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control
Panel\Desktop]
"ScreenSaveActive"=dword:00000000
"SCRNSAVE.EXE"= (place wanted value here)

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSaveSettings"=dword:00000000

 

[Guest]

What do I need to change in the registry to disable the user from being able
to change the screensaver w/o using GPO?

 

[Kelly]

Several keys.

[HKEY_CURRENT_USER\Control Panel\Desktop]
"ScreenSaverIsSecure"="1"
"ScreenSaveActive"="1"

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control
Panel\Desktop]
"ScreenSaveActive"=dword:00000000
"SCRNSAVE.EXE"= <set path here>