Screensaver passwords through GPO

[Simon Young]

Hi, can anyone help me please...



We are looking to set up some additional security on the network and one
aspect is that we want to be able to lock machines on the network if they
have been inactive for over 15 mins



The way I have set this up is to create a GPO that automatically activates
the screensaver on the machines (through the User Configuration\Admin
Templates\Control Panel\Display section of the policy) after 900 seconds,
disables access to the screensaver tab for users, and forces the 'logon.scr'
screensaver to run, I have also set the password protect option.



However, when the screensaver comes on then I move the mouse to get back to
the desktop, it does not ask me for a password so is not locking the
machine.



Is the 'password protect' option on the GPO not the same as the 'on resume,
password protect' option you get on the local machines (or is this due to
the fact that im testing it on an account with admin privileges?)



If not, is there any way to set this so the screensaver locks the machine
without me having to manually set the option on every machine on the LAN
before applying this policy?



Thanks in Advance



Simon

 

[myweb]

Hello Simon,

Did you check with gpresult if the policy is really applied from the workstation?
Or maybe there is another group policy that overrides your new created with
this option?

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[Norbert Fehlauer [MVP]]

Simon Young wrote:
Hi,

However, when the screensaver comes on then I move the mouse to get
back to the desktop, it does not ask me for a password so is not
locking the machine.

After which time did you move the mouse? There's a screensaver grace time
before you need to enter the password.

Bye
Norbert

 

[Simon Young]

Norbert...

Thanks for that, i moved the mouse to clean the screensaver almost
instantly, if i leave it for a 30 seconds, the password protection activates
no problem

Regards

Simon

 

[Norbert Fehlauer [MVP]]

Simon Young wrote:
Hi,

Thanks for that, i moved the mouse to clean the screensaver almost
instantly, if i leave it for a 30 seconds, the password protection
activates no problem

So your problem is solved. BTW you can configure this gracetime with a
custom adm template.

Bye
Norbert