![]() ![]() I brought it up to 2 minutes and tested, works fine. Oddly, when the GP is set to lockout at 1 minute, it works fine. During all of this testing, I brought the timeout down to 1 minute so I could test my changes, then bump it up to 15 minutes when I'm done. ![]() I can even make changes to the time for lockout in the GP, force GP update, log out and log back in and can even see the lock time going up and down on the PC itself. I ran GP Result Wizard to test and verified that it's running on the machine and applying properly. I switched the executable name to %windir%\system32\rundll32.exe user32.dll,LockWorkStation and tested. I looked at it and think it wasn't working because the screensaver executable name was set to logon.scr (which I think only works with older OS's - everyone is on win 7 and higher). I found the old group policy they had for this, but odd thing was, it was still enabled (just not working on any of the PCs). I went into GP editor on the DC and did some digging. Our contact there wants to enforce this again. They said they previously had this enabled, but users complained about it so they disabled it a while ago. I have a client that would like to enforce a GPO to lock screens at 15 minutes of inactivity. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |