That is a thought. Thanks for that. It was just brought to my attention that this is being driven by certain compliance requirements (Federal, PCI, etc.). If I can determine that the specific servers in questions don't fall under those compliance guidelines, I may just request that the auto-lock policies be disabled entirely.
- Sean On Fri, Sep 11, 2009 at 9:49 AM, James Rankin <[email protected]> wrote: > You could just try a logon script for that OU that writes the Registry keys > for the screen saver preferences to HKCU without applying them via a policy > - clunky, but probably effective > > > 2009/9/11 Sean Martin <[email protected]> > >> That sounds like an interesting solution, but you're right, deploying >> Windows 2008 isn't realistic in our environment just yet. >> >> - Sean >> >> On Fri, Sep 11, 2009 at 9:43 AM, James Rankin <[email protected]>wrote: >> >>> Can you do this with a Group Policy Preference rather than a Policy >>> Object? If I remember rightly the Policy option locks the option to change >>> it regardless. The Preference option might give the user the option to >>> change...although you will have to install a 2008 DC, load the GP management >>> tool on a 2008/Vista client and install the Group Policy Client-Side >>> Extensions on the clients if memory serves me right. Might be a bit too much >>> work for what you are trying to achieve (if my recollection is correct, I >>> may be talking complete garbage) >>> >>> 2009/9/11 Sean Martin <[email protected]> >>> >>> Windows 2003 Domain >>>> Windows XP Clients >>>> Windows 2003 Servers >>>> Windows XPe Thin Clients >>>> >>>> I'm deploying a GPO to auto lock all desktops/servers after 15 minutes >>>> of inactivity. This GPO also disables access to the screen saver tab in >>>> Display properties. That works just fine. I have a couple of OUs containing >>>> Computer Objects that need the same auto lock settings, except I don't want >>>> to disable access to the screen saver settings. I thought this would be >>>> possible by creating a separate GPO for that OU and enabling loop back >>>> processing. I've disabled the feature "Hide Screen Saver tab", and the >>>> screen saver tab is visible on those Computers, however I'm still unable to >>>> modify the screen saver settings. >>>> >>>> Is there any way around that without disabling the auto lock settings >>>> entirely? >>>> >>>> - Sean >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>> >>> >>> -- >>> "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into >>> the machine wrong figures, will the right answers come out?' I am not able >>> rightly to apprehend the kind of confusion of ideas that could provoke such >>> a question." >>> >>> http://raythestray.blogspot.com >>> >>> >>> >>> >>> >>> >> >> >> >> >> > > > -- > "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into > the machine wrong figures, will the right answers come out?' I am not able > rightly to apprehend the kind of confusion of ideas that could provoke such > a question." > > http://raythestray.blogspot.com > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
