Windows XP Corporate Screen Saver Policy

  • Thread starter Thread starter Charlie S
  • Start date Start date
C

Charlie S

Greetings

Got a screen saver / group policy /registry question... My company is
investigating a screen saver / screen lock policy and they would like
it to do the following:

1) Enable Screensaver, allow users the options to pick one, and do not
allow the "None" option to be available

2) Require password when screen saver is deactivated (when someone
returns to the system)

3) Require screen saver to activate at a maximum of 60 min of
inactivity, but would like to allow users to change that number, just
cannot be greater than 60

Is this possible? I know that I can force a particular screen saver,
enable security, and set time through Group Policy, I just wasn't sure
if this was possible.

If this is/isn't possible, could you point me in a direction that would
be the closest solution to this?

Thanks,
Charlie
 
Hi,

Charlie said:
1) Enable Screensaver, allow users the options to pick one, and do not
allow the "None" option to be available
Click to expand...

If the Screensyver is set to be activ, passwort protected and the
user have the option to select it, then AFAIK "none" is the same like
blank screen.
2) Require password when screen saver is deactivated (when someone
returns to the system)
Click to expand...

No problem.
AdmTempl\Control panel\display
3) Require screen saver to activate at a maximum of 60 min of
inactivity, but would like to allow users to change that number, just
cannot be greater than 60
Is this possible?
Click to expand...

No. You have to define the screensaver time. It is no optional.
And a timeframe of more than 15 minutes makes absolutly no sense
to me, for security reasons.

A password protected screensaver is for the users who forget to
press WinKey+L, at time they leave the computer for a short brake.

Mark
 
Charlie said:
2) Require password when screen saver is deactivated (when someone
returns to the system)
Click to expand...

In addition to Mark's reply, I'll just briefly note that not all
screensavers work well with a password system and if you let the users pick
their screensaver they might install a custom one and you'll get
unpredictable results. I strongly suggest that if you think you need to
specify a screensaver policy as far as you already appear to have done so,
you will find it far easier in the end if you 'close the circle' and also
enforce a particular screensaver.
 
Hello Charlie.
1) Enable Screensaver, allow users the options to pick one, and do not
allow the "None" option to be available
Click to expand...

If you want to enforce the use of a screensaver, you need to pick a
specific one. If you do not, they will have the option to select
"none". I do not believe there is a way around that.
2) Require password when screen saver is deactivated (when someone
returns to the system)
Click to expand...

Simple enough. You'll see that option clearly listed in your GPO.
3) Require screen saver to activate at a maximum of 60 min of
inactivity, but would like to allow users to change that number, just
cannot be greater than 60
Click to expand...

Again, if you don't specify a specific length of time, they can select
anything they want.

Jack Doyle, Systems Engineer
ScriptLogic Corporation
www.scriptlogic.com
 
Hi Charlie,
answers inline

1) Enable Screensaver, allow users the options to pick one, and do not
allow the "None" option to be available

Nope, GPO setting is mandatory, no selectable

2) Require password when screen saver is deactivated (when someone
returns to the system)

Yes, standard via UserConfig\AdminTemplates\ControlPanel\Display\Password
protect screen saver

3) Require screen saver to activate at a maximum of 60 min of
inactivity, but would like to allow users to change that number, just
cannot be greater than 60

Nope, GPO setting is mandatory, no selectable
 
Back
Top