Re: Screensaver Password Policy Doesn't Work

From: Al Blake (al@blakes.net)
Date: 07/24/02 

From: "Al Blake" <al@blakes.net>
Date: Wed, 24 Jul 2002 21:49:41 +1000

PLEASE can you post if you ever find a fix.
We have exactly the same problem and it has been driving me mad for a month
now:
Network - Win2k using AD in native mode
Clients - Win2k and XP
Group policy - screen saver enabled and password protected for all users via
Domain GPO

Result: All users get screen saver but only some get passowrd protection.
Others the screen saver just comes off when you move the mouse without
prompting for a password. I can find no link between those users that the
GPO works for and those that it doesnt.

Screeensaver password protection is essential for our security situation.

Al Blake, Australia

"Mike Dwyer" <mike.dwyer@lakelandgov.net> wrote in message
news:6086d63e.0207230424.78dd6d2e@posting.google.com...
> ryan_provost@bat.com (Ryan Provost) wrote in message
news:<700a0e64.0206250638.24f4e682@posting.google.com>...
> > Okay, I'm a bit confused on this one. Let me explain the scenario. I
> > have about 2000 Windows XP Pro workstations to roll-out in my company,
> > using a Windows 2000 Active Directory domain in native mode. Corporate
> > policy requires screensavers on each desktop, and these screensavers
> > must be password protected. To accomplish this, I have configured the
> > system policies to password protect the screen saver. It does not seem
> > to be working. The screen saver, also configured by the policy, does
> > indeed activate after the set timeout duration, but the console does
> > NOT lock as it should. I have no idea why this is not working.
> >
> > After poking around on the internet for some answers, I stumbled
> > across a few newsgroup posts by people experiencing much the same
> > problem, yet no answer has been given ... at least that I could find.
> > So I decided to post for myself in the hopes of stirring up an answer.
> >
> > I have updated the .ADM templates in Active Directory to the new
> > Windows XP templates, and most of the XP-specific settings do in fact
> > work. The policy template sets the following registry key for screen
> > saver password:
> >
> > HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop
> > Value: ScreenSaverIsSecure = 1
> >
> > When I dig into the Windows registry, and search for this same value I
> > find another duplicate value in a different location.
> >
> > HKCU\Control Panel\Desktop
> > Value: ScreenSaverIsSecure = 0
> >
> > Note that in this location the value is set to 0, or 'Off'. If I
> > manually set the value to 1, or 'On', the console still does not lock
> > itself. I cannot figure out what is going wrong here. Is the policy
> > template setting the wrong value? Is there something else at fault
> > that I have no considered? Any help that anyone could offer on this
> > subject would be most appreciated. I am at wits end.
> >
> > TIA, Ryan Provost
>
> I am experiencing the same problem. I am using Domain Group Policy to
> accomplish the same thing. It works on some machines, and not on
> others. The screen saver comes on for all but does not lock for all.
> I have tried everything I can think of to isolate the problem, but
> have had no success.
>
> MD

Relevant Pages

  • Re: Screensaver Password Policy Doesnt Work
    ... Group policy - screen saver enabled and password protected for all users via ... All users get screen saver but only some get passowrd protection. ... Screeensaver password protection is essential for our security situation. ... >> Windows XP templates, and most of the XP-specific settings do in fact ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Screensaver lockout in Group Policy
    ... What exact policy setting are you working with? ... off of the top of my head I think you are saying you 'lock the workstation' ... In policy you have "Hide Screen Saver", which hides the screen saver tab ...
    (microsoft.public.win2000.group_policy)
  • Re: Loopback processing not working
    ... Well you could just deny the right to apply the policy for the screen saver ... I understand that loopback processing within a policy is the route to go ... Policy Setting ... Password protect the screen saver Enabled ...
    (microsoft.public.windows.server.active_directory)
  • RE: ScreenSaver timeout problem via GPO
    ... Number of Seconds to wait to enable the Screen Saver = Enabled at 0 Seconds ... give you some facts about these laptops so you know the situation. ... This policy is not enforced so if a lower OU blocks inheritance it ... loopback processing and it would still run if in the correct order. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Reverting GPO settings back to Default
    ... Well, keep in mind that Screen Saver policy is per-user, so if the user account isn't moving to a different OU as well, then nothing is going to change for that user, regardless of where their laptop computer account resides. ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ...
    (microsoft.public.windows.group_policy)