Can you do this with a Group Policy Preference rather than a Policy Object? If I remember rightly the Policy option locks the option to change it regardless. The Preference option might give the user the option to change...although you will have to install a 2008 DC, load the GP management tool on a 2008/Vista client and install the Group Policy Client-Side Extensions on the clients if memory serves me right. Might be a bit too much work for what you are trying to achieve (if my recollection is correct, I may be talking complete garbage)
2009/9/11 Sean Martin <[email protected]> > Windows 2003 Domain > Windows XP Clients > Windows 2003 Servers > Windows XPe Thin Clients > > I'm deploying a GPO to auto lock all desktops/servers after 15 minutes of > inactivity. This GPO also disables access to the screen saver tab in Display > properties. That works just fine. I have a couple of OUs containing Computer > Objects that need the same auto lock settings, except I don't want to > disable access to the screen saver settings. I thought this would be > possible by creating a separate GPO for that OU and enabling loop back > processing. I've disabled the feature "Hide Screen Saver tab", and the > screen saver tab is visible on those Computers, however I'm still unable to > modify the screen saver settings. > > Is there any way around that without disabling the auto lock settings > entirely? > > - Sean > > > > > > > > -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." http://raythestray.blogspot.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
