Ledhed at 01:35, 26 October 2013

2013-10-26T01:35:54Z

Ledhed at 00:45, 26 October 2013

2013-10-26T00:45:36Z

Ledhed: Created page with "For years I've used Group Policy to set password protected screen savers and the timeout. The problem is that users like their screen savers and if you force one with group po..."

2013-10-26T00:43:41Z

Created page with "For years I've used Group Policy to set password protected screen savers and the timeout. The problem is that users like their screen savers and if you force one with group po..."

New page

For years I've used Group Policy to set password protected screen savers and the timeout.
The problem is that users like their screen savers and if you force one with group policy then you could end up with a riot on your hands.

Well I found a solution!

== Overview ==
With the introduction of Group Policy Preferences (and Item Level Targeting) you can now set your desired screen saver settings while letting the user choose what screen saver to use.<br>

Heres how. You set all the settings you want for example:
User Configuration\Administrative Templates\Control Panel\Personalization\
Enable screen saver = Enabled
Password protect the screen saver = Enabled
Screen saver timeout = 900

Now you might be thinking I missed "Force specific screen saver", but this is where things get cool.

Instead of forcing a specific screen saver we're going to use Group Policy Preferences and Item Level Targeting to accomplish our goal and give the user some freedom.

== Group Policy Preferences ==
Logic: We're going to create a GPP that sets the registry key that controls the screensaver, but we will use Item Level Targeting to conditionally set this policy only if the user has set the screensaver to "None".

=== Create Registry Key ===
User Configuration\Preferences\Windows Settings\Registry
1) Create a new Registry item with the following settings.
Action = Update
Hive = HKEY_CURRENT_USER
Key path = Control Panel\Desktop
Value name = SCRNSAVE.EXE
Value type = REG_SZ
Value data = C:\Windows\system32\scrnsave.scr

2) Setup Item Level Targeting
Click the "Common" tab
[X] Item-level targeting
Click Targeting...
Click "New Item"
Choose "Registry Match"
Click "Item Options"
Click "Is Not"
Set Match type = Value exists
Hive = HKEY_CURRENT_USER
key path = Control panel\Desktop
Value name = SCRNSAVE.EXE
Value type = REG_SZ

[[File:ScreenSaver_TargetingEditor.png]]

What this does is look for HKEY_CURRENT_USER\Control panel\Desktop\SCRNSAVE.EXE<br>
And if this key does not exist (Meaning the user set their screen saver to None) then apply the GPP and force the blank screen saver (scrnsave.scr).
But if the key does exist then don't apply the GPP (Meaning the users chosen screen saver will remain in effect).

[[Category:Group Policy]]

@@ Line 54: / Line 54: @@
 And if this key does not exist (Meaning the user set their screen saver to None) then apply the GPP and force the blank screen saver (scrnsave.scr).
 But if the key does exist then don't apply the GPP (Meaning the users chosen screen saver will remain in effect).
 [[Category:Group Policy]]

@@ Line 31: / Line 31: @@
   Value type = REG_SZ
   Value data = C:\Windows\system32\scrnsave.scr
 ) Setup Item Level Targeting

Set ScreenSaver with Group Policy - Revision history

Ledhed at 01:35, 26 October 2013

Ledhed at 00:45, 26 October 2013

Ledhed: Created page with "For years I've used Group Policy to set password protected screen savers and the timeout. The problem is that users like their screen savers and if you force one with group po..."