Group Policy Screen Saver

[bazzert]

At the school where I work the staff can log on to machines that the kids use and their own laptop.

Problem is that some of them forget they have logged on and leave the machine open with the obvious security issue.

I applied GP for screen saver to the Staff OU and this worked fine except when they use laptop for class demonstrations the screen saver is a problem.

The laptops are in one OU and the rest of the machines the kids use in another.

I'm trying to have the policy apply when staff use machines the kids use and not for their laptops but at the moment I can't seem to get this to work.

Can anyone help?

 

[bazzert]

Sorry dropped this in wrong froum should have been Server 2000

 

[CGIMana]

Ouch..hummm When you have the screen saver set to pass word when it turns on, that's only on the local machine. If the kids don't use or have access to the laptops then take the screen saver off the laptops and only have it on the desktops. ANd on the server side there should be a to limit access to programs and files. Mabey make a mrdudlydemo profile that doesn't have any access to program that you don't specify, so when mrdudly is doing a demo using his laptop that profile doens't have a screen saver or access to the program you don't want the kids to have access to..i.e rollcall, and the gradeing system.

 

[bazzert]

In principle thats what I'm trying to do. If I set the SS to run on the desktop OU nothing happens. The policy only seems to work when I apply it to the OU with the user accounts.

Pupils don't have any access to change anything on the desktops, no right click, no change the wallpaper, no screensaver, if they enter \\ it clears straight away so no getting to server shares. When thay log on the desktop is set and the start menu only contains permitted programs and logoff. In log off menu all buttons bar logoff and cancel are disabled.

Pupils don't have access to the laptops, biggest problem we have is the staff will log on to a desktop and forget that they have left it logged on.

Hence reason I'm trying to get it workng on desktops and not laptops. I've had a quick try at changing the registry on te laptops but the GP seems to override that.