Windows XP Corporate Screen Saver Policy

C

Charlie S

Greetings

Got a screen saver / group policy /registry question... My company is
investigating a screen saver / screen lock policy and they would like
it to do the following:

1) Enable Screensaver, allow users the options to pick one, and do not
allow the "None" option to be available

2) Require password when screen saver is deactivated (when someone
returns to the system)

3) Require screen saver to activate at a maximum of 60 min of
inactivity, but would like to allow users to change that number, just
cannot be greater than 60

Is this possible? I know that I can force a particular screen saver,
enable security, and set time through Group Policy, I just wasn't sure
if this was possible.

If this is/isn't possible, could you point me in a direction that would
be the closest solution to this?

Thanks,
Charlie
 
M

Mark Heitbrink [MVP]

Hi,

Charlie said:
1) Enable Screensaver, allow users the options to pick one, and do not
allow the "None" option to be available

If the Screensyver is set to be activ, passwort protected and the
user have the option to select it, then AFAIK "none" is the same like
blank screen.
2) Require password when screen saver is deactivated (when someone
returns to the system)

No problem.
AdmTempl\Control panel\display
3) Require screen saver to activate at a maximum of 60 min of
inactivity, but would like to allow users to change that number, just
cannot be greater than 60
Is this possible?

No. You have to define the screensaver time. It is no optional.
And a timeframe of more than 15 minutes makes absolutly no sense
to me, for security reasons.

A password protected screensaver is for the users who forget to
press WinKey+L, at time they leave the computer for a short brake.

Mark
 
R

Robert Moir

Charlie said:
2) Require password when screen saver is deactivated (when someone
returns to the system)

In addition to Mark's reply, I'll just briefly note that not all
screensavers work well with a password system and if you let the users pick
their screensaver they might install a custom one and you'll get
unpredictable results. I strongly suggest that if you think you need to
specify a screensaver policy as far as you already appear to have done so,
you will find it far easier in the end if you 'close the circle' and also
enforce a particular screensaver.
 
J

Jack Doyle

Hello Charlie.
1) Enable Screensaver, allow users the options to pick one, and do not
allow the "None" option to be available

If you want to enforce the use of a screensaver, you need to pick a
specific one. If you do not, they will have the option to select
"none". I do not believe there is a way around that.
2) Require password when screen saver is deactivated (when someone
returns to the system)

Simple enough. You'll see that option clearly listed in your GPO.
3) Require screen saver to activate at a maximum of 60 min of
inactivity, but would like to allow users to change that number, just
cannot be greater than 60

Again, if you don't specify a specific length of time, they can select
anything they want.

Jack Doyle, Systems Engineer
ScriptLogic Corporation
www.scriptlogic.com
 
K

Kurt Roggen

Hi Charlie,
answers inline

1) Enable Screensaver, allow users the options to pick one, and do not
allow the "None" option to be available

Nope, GPO setting is mandatory, no selectable

2) Require password when screen saver is deactivated (when someone
returns to the system)

Yes, standard via UserConfig\AdminTemplates\ControlPanel\Display\Password
protect screen saver

3) Require screen saver to activate at a maximum of 60 min of
inactivity, but would like to allow users to change that number, just
cannot be greater than 60

Nope, GPO setting is mandatory, no selectable
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top