Screen Saver GPO

[Daveyd123]

I have a password protected screen saver GPO that locks workstations after 15 mins of inactivity. I know that screen savers are profile specific and the GPO is applied to User Configuration.

My question is...I have a user that logs into 2 different workstations. She logs in to both with her Domain credentials. She cannot have a password protected screen saver on one of the computers. Is there a way to have the GPO screen saver affect her at one computer and not the other?

If I add the user to the GPO ACL as Deny, Read...then she won't have the password protected screen saver at ANY computer she logs into

 

[porkchopexpress]

On the computer where you don't want the screen saver to apply you can enable loopback mode and dissable the screen saver there.

http://support.microsoft.com/?id=231287

 

[Daveyd123]

I found another way...lol...

I gave the user temp local admin rights...had her log on... removed all ACL entries to HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop...took away admin rights and had her log off/on...now she can disable the screen saver

 

[porkchopexpress]

I could be wrong but you might find the screen saver will be turned back on at each policy refresh.

 

[Daveyd123]

I ran gpupdate /force and it still worked. There are no ALCs on that folder so nothing can write to it

 

[Daveyd123]

Of course you'll have to deal with this error message in event viewer...

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1020
Date: 3/7/2006
Time: 10:15:10 AM
User: NT AUTHORITY\SYSTEM
Computer:
Description:
Windows cannot create registry key Software\Policies\Microsoft\Windows\Control Panel\Desktop. (Access is denied. ).

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

 

[porkchopexpress]

Yes true well if it works then it's a solution

 

[58sniper]

Not if it's tossing events in the logs. That's not a solution. That's a bandaid.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[porkchopexpress]

I think Daveyd123s last post was admiting to it being a hack.