Locking desktops in AD for inactive end users |
 |
EXPERT RESPONSE FROM: Jeremy Moskowitz
|
|
|
|
| > |
QUESTION POSED ON: 19 May 2004
Can I use Group Policy to lock all desktops in AD if end-users have not had any action in a period of time? And how can I do it? I checked over the Group Policy setting and could not find one for this.
|
|
| > |
EXPERT RESPONSE
You can use the "Screen Saver Timeout" policy setting which is found at User Configuration | Administrative Templates | Control Panel | Display | Screen Saver Timeout. However, this won't actually lock the system. To lock it, you need to have the "On resume, password protect" already set, or you can create an ADM template that does the same thing. The registry values you're after are here:
HKEY_CURRENT_USERControl PanelDesktopScreenSaverActive set to 1.
|
|
|
|
|
|
|
|
Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and
answer pairs from more than 250 TechTarget industry experts.
|
|
|
|
|
|
|
|
|
|
|
|
