none
PC's locking after 10 mins

    Question

  • Hey

    Our machines keep locking after 10 mins and require logging in. Some PC's need to never lock, or lock after a longer amount of time.

    In the GP power settings i have set the computers to never sleep and the screen to go off after 20 mins. However the machines still lock after 10 mins.

    I have even removed all Power settings, but something is forcing the machine to lock, but no idea what is.

    Any tips?

    Friday, June 17, 2016 8:29 AM

All replies

  • Hello and welcome to technet.

    Did you check the settings for your screensaver? 

    For local pc and trough gpo:

    http://www.sevenforums.com/tutorials/106343-screen-saver-timeout-period-set-change.html

    ---------------------------------------------------------------------------------------------------------------

    Please mark the answer to your question as answer; mark usefull answers as usefull.




    Friday, June 17, 2016 8:38 AM
  • Hello and welcome to technet.

    Did you check the settings for your screensaver? 

    For local pc and trough gpo:

    http://www.sevenforums.com/tutorials/106343-screen-saver-timeout-period-set-change.html

    ---------------------------------------------------------------------------------------------------------------

    Please mark the answer to your question as answer; mark usefull answers as usefull.




    Hey

    I tried following the local GP editor, set Screensaver to 90 minutes, but when i popped back from the office 15 mins later, screen was black and locked. I have also changed it in the main GP settings. After 6 mins, screen black and locked :(

    In Lock Screen settings, screen time out options are set correctly to my GP settings (never sleep and screen off after 20 mins). Screensaver settings are greyed out, but the wait time is 18 mins with "On resume, display login screen" ticked.


    Annoying!


    Friday, June 17, 2016 9:20 AM
  • If it is greyed out it might be a GPO blocking access to it... there is not a hidden gpo setting this setting?

    Some graphic cards wich have their own software also have a option for turning off screen.. i cannot tell you where to look because it is different for every graphic card. 

    There is also an option.. Settings>Lock Screen>Advanced Slideshow Settings. Check if that one doesnt turn off your screen please.

    You also might want to check out this:

    http://www.eightforums.com/tutorials/8267-power-options-add-console-lock-display-off-timeout.html

    Friday, June 17, 2016 9:38 AM
  • If your in a domain environment these settings could be being set by GPO. Do you have a domain setup and if so, can you check the GPO's to see if they are setting this?
    Friday, June 17, 2016 11:03 AM
  • If we assume that the machine is locking before it goes black - that makes it easier to accept that it's unlikely to be a screensaver setting.~

    Sounds like you may have some rogue GPO doing some work in the background, if you are in a domain environment of course. I would examine Group Policy and use modelling if required to determine the scope and effect of the policies you are applying. You may fine well be surprised.

    In any other instance, I would examine Local Security Policy to see if you can find anything specific in there with regards to locking down the machine following a certain time lapse.

    I wish you well.

    Dan
    • Proposed as answer by Daniel_Ellis Friday, June 17, 2016 11:09 AM
    Friday, June 17, 2016 11:09 AM
  • Hey guys

    We are on a domain, using GPO: Here is a Computer policy:

    Computer Policy
    Data collected on: 17/06/2016 12:11:17
    hide all
    Generalhide
    Detailshide
    Domain DOMAIN
    Owner COLLEGE\Domain Admins
    Created 29/10/2012 15:24:44
    Modified 17/06/2016 10:23:26
    User Revisions 5 (AD), 5 (SYSVOL)
    Computer Revisions 56 (AD), 56 (SYSVOL)
    Unique ID {4B9124AF-7D4F-441E-A4DE-9CFCCC694859}
    GPO Status Enabled
    Linkshide
    Location Enforced Link Status Path
    college..computers No Enabled
    Windows 10 - AcAdmin No Enabled
    Windows 10 No Enabled
    Dev Office - Windows 10 No Enabled
    Windows 10 No Enabled
    Windows 10 - Home Bursary No Enabled
    Windows 10 No Enabled
    BackOffice No Enabled
    Windows 10 No Enabled
    Windows 10 - Kitchen No Enabled
    LR4 Display No Enabled
    Windows - LR6 No Enabled
    Windows 10 - Senmem No Enabled
    Windows 10 - Wardens No Enabled
    Windows 10 No Enabled
    00036PC No Enabled

    This list only includes links in the domain of the GPO.
    Security Filteringhide
    The settings in this GPO can only apply to the following groups, users, and computers:
    Name
    NT AUTHORITY\Authenticated Users
    Delegationhide
    These groups and users have the specified permission for this GPO
    Name Allowed Permissions Inherited
    COLLEGE\Domain Admins Edit settings, delete, modify security No
    COLLEGE\Enterprise Admins Edit settings, delete, modify security No
    NT AUTHORITY\Authenticated Users Read (from Security Filtering) No
    NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS Read No
    NT AUTHORITY\SYSTEM Edit settings, delete, modify security No
    Computer Configuration (Enabled)hide
    Policieshide
    Administrative Templateshide
    Policy definitions (ADMX files) retrieved from the central store.
    Network/Offline Fileshide
    Policy Setting Comment
    System/Group Policyhide
    Policy Setting Comment
    Allow processing across a slow network connection Enabled
    Process even if the Group Policy objects have not changed Enabled
    Background priority Idle
    System/Logonhide
    Policy Setting Comment
    Preferenceshide
    Windows Settingshide
    Registryhide
    Collection: Registry Wizard Values/HKEY_CURRENT_USER/Keyboard Layout/Preloadhide
    Commonhide
    Options
    Stop processing items on this extension if an error occurs on this item No
    Apply once and do not reapply No
    Registry item: Preloadhide
    Generalhide
    Action Replace
    Properties
    Hive HKEY_CURRENT_USER (HKU\.DEFAULT)
    Key path Keyboard Layout\Preload
    Commonhide
    Options
    Stop processing items on this extension if an error occurs on this item No
    Remove this item when it is no longer applied No
    Apply once and do not reapply No
    Registry item: 1hide
    Generalhide
    Action Replace
    Properties
    Hive HKEY_CURRENT_USER (HKU\.DEFAULT)
    Key path Keyboard Layout\Preload
    Value name 1
    Value type REG_SZ
    Value data 00000809
    Commonhide
    Options
    Stop processing items on this extension if an error occurs on this item No
    Remove this item when it is no longer applied No
    Apply once and do not reapply No
    Control Panel Settingshide
    Power Optionshide
    Power Plan (At least Windows 7) (Name: Balanced)hide
    Power Plan (Windows Vista and later) (Order: 1)hide
    Propertieshide
    Action Update
    Make this the active Power Plan: Enabled
    Name Balanced
    When computer is: Plugged in Running on batteries
    Require a password on wakeup: Yes Yes
    Turn off hard disk after: Never After 200 minutes
    Sleep after: Never After 200 minutes
    Allow hybrid sleep: Off Off
    Hibernate after: Never Never
    Lid close action: Sleep Sleep
    Power button action: Sleep Sleep
    Start menu power button: Do nothing Do nothing
    Link State Power Management: Moderate power savings Maximum power savings
    Minimum processor state: After 5 minutes After 5 minutes
    Maximum processor state: After 100 minutes After 100 minutes
    Turn off display after: After 20 minutes After 20 minutes
    Adaptive display: Off Off
    Critical battery action: Do nothing Hibernate
    Low battery level: After 10 minutes After 10 minutes
    Critical battery level: After 5 minutes After 5 minutes
    Low battery notification: Off Off
    Low battery action: Do nothing Do nothing
    Commonhide
    Options
    Stop processing items on this extension if an error occurs on this item No
    Remove this item when it is no longer applied No
    Apply once and do not reapply No
    User Configuration (Enabled)hide
    Policieshide
    Administrative Templateshide
    Policy definitions (ADMX files) retrieved from the central store.
    Control Panel/Personalizationhide
    Policy Setting Comment
    Number of seconds to wait to enable the screen saver
    Seconds: 5400


    Friday, June 17, 2016 11:14 AM
  • Few things look like they can cause it..

    first of all theres the power plan wich is balanced? put that to high power?

    Second: the screen saver thing is right at the bottom.. 

    Otherwise.. make sure all this is correctly applied to your computer.. dont forget the gpupdate /force after changing anything in a GPO

    Friday, June 17, 2016 11:30 AM
  •  
    > User Configuration (Enabled)hide
    > Policieshide
    > Administrative Templateshide
    > Policy definitions (ADMX files) retrieved from the central store.
    > Control Panel/Personalizationhide
    > Policy     Setting     Comment
    > Number of seconds to wait to enable the screen saver
    > Seconds:     5400
    >
     
    Computers do not process user policies - they completely ignore all and
    everything in user configuration.
     
    To address your requirement:
     
    --
    Greetings/Grüße, Martin -
    Mal ein gutes Buch über GPOs lesen? -
    Good or bad GPOs? My blog - http://evilgpo.blogspot.com
    And if IT bothers me? Coke bottle design refreshment -
     
    Friday, June 17, 2016 11:46 AM
  • Few things look like they can cause it..

    first of all theres the power plan wich is balanced? put that to high power?

    Second: the screen saver thing is right at the bottom.. 

    Otherwise.. make sure all this is correctly applied to your computer.. dont forget the gpupdate /force after changing anything in a GPO

    Hey

    I have changed the power settings, will see if this helps!

    Friday, June 17, 2016 12:14 PM
  • Hi,
    I am checking how the issue is going. We appreciate your any update and share. If you have any other questions, please feel free to post here again.
    Regards,
    Wendy

    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, June 20, 2016 8:08 AM
    Moderator
  • Still locking.

    I have tried the below, yet it is still locking! :(

    Computer Configuration (Enabled)hide
    Policieshide
    Administrative Templateshide
    Policy definitions (ADMX files) retrieved from the central store.
    Control Panel/Personalizationhide
    Policy Setting Comment
    System/Logonhide
    Policy Setting Comment
    System/Power Management/Hard Disk Settingshide
    Policy Setting Comment
    Turn Off the Hard Disk (seconds): 0
    System/Power Management/Sleep Settingshide
    Policy Setting Comment

    If you enable or do not configure this policy setting, the user is prompted for a password when the system resumes from sleep.

    If you disable this policy setting, the user is not prompted for a password when the system resumes from sleep." gpmc_settingname="Require a password when a computer wakes (plugged in)" gpmc_settingpath="Computer Configuration/Administrative Templates/System/Power Management/Sleep Settings" gpmc_supported="At least Windows Vista" tabindex="0">Require a password when a computer wakes (plugged in)
    Disabled
    System Hibernate Timeout (seconds): 0
    Policy Setting Comment
    System Hibernate Timeout (seconds): 0
    Policy Setting Comment
    System Sleep Timeout (seconds): 0
    Policy Setting Comment
    System Sleep Timeout (seconds): 0
    Policy Setting Comment
    Unattended Sleep Timeout (seconds): 0
    Policy Setting Comment
    Unattended Sleep Timeout (seconds): 0
    Windows Components/Internet Explorer/Delete Browsing Historyhide
    Policy Setting Comment
    Windows Components/Internet Explorer/Internet Control Panelhide
    Policy Setting Comment
    Preferenceshide
    Windows Settingshide
    Registryhide
    Collection: Registry Wizard Values/HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Explorer/Advancedhide
    Commonhide
    Options
    Stop processing items on this extension if an error occurs on this item No
    Apply once and do not reapply No
    Registry item: PowerButtonActionhide
    Generalhide
    Action Replace
    Properties
    Hive HKEY_CURRENT_USER (HKU\.DEFAULT)
    Key path Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    Value name PowerButtonAction
    Value type REG_DWORD
    Value data 0x4 (4)
    Commonhide
    Options
    Stop processing items on this extension if an error occurs on this item No
    Remove this item when it is no longer applied No
    Apply once and do not reapply No
    Collection: Registry Wizard Values/Registry Wizard Values/HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Power/PowerSettings/abfc2519-3608-4c2a-94ea-171b0ed546abhide
    Commonhide
    Options
    Stop processing items on this extension if an error occurs on this item No
    Apply once and do not reapply No
    Registry item: ACSettingIndexhide
    Generalhide
    Action Replace
    Properties
    Hive HKEY_LOCAL_MACHINE
    Key path SOFTWARE\Policies\Microsoft\Power\PowerSettings\17aaa29b-8b43-4b94-aafe-35f64daaf1ee
    Value name ACSettingIndex
    Value type REG_DWORD
    Value data 0x0 (0)
    Commonhide
    Options
    Stop processing items on this extension if an error occurs on this item No
    Remove this item when it is no longer applied No
    Apply once and do not reapply No
    Control Panel Settingshide
    Power Optionshide
    Power Plan (At least Windows 7) (Name: Maximum Performance)hide
    Power Plan (Windows Vista and later) (Order: 1)hide
    Propertieshide
    Action Create
    Make this the active Power Plan: Enabled
    Name Maximum Performance
    When computer is: Plugged in Running on batteries
    Require a password on wakeup: No No
    Turn off hard disk after: Never Never
    Sleep after: Never Never
    Allow hybrid sleep: Off Off
    Hibernate after: Never Never
    Lid close action: Do nothing Do nothing
    Power button action: Sleep Sleep
    Start menu power button: Do nothing Do nothing
    Link State Power Management: Off Off
    Minimum processor state: After 100 minutes After 5 minutes
    Maximum processor state: After 100 minutes After 100 minutes
    Turn off display after: Never Never
    Adaptive display: On On
    Critical battery action: Do nothing Hibernate
    Low battery level: After 10 minutes After 10 minutes
    Critical battery level: After 5 minutes After 5 minutes
    Low battery notification: Off Off
    Low battery action: Do nothing Do nothing
    Commonhide
    Options
    Stop processing items on this extension if an error occurs on this item No
    Remove this item when it is no longer applied No
    Apply once and do not reapply No

    Monday, June 20, 2016 10:43 AM
  • please run a gpresult and post the outcome here

    To run GPResult on your own computer:

    1. Click StartRun, and enter cmd to open a command window.

    2. Type gpresult and redirect the output to a text file as shown in Figure 1 below:

      Directing GPResult data to a text file

      Figure 1. Directing GPResult data to a text file
    3. Enter notepad gp.txt to open the file. Results appear as shown in the figure below.

      Verifying policies with GPResult

      You can also use .html instead of .txt!

    Monday, June 20, 2016 12:20 PM
  • please run a gpresult and post the outcome here

    To run GPResult on your own computer:

    1. Click StartRun, and enter cmd to open a command window.

    2. Type gpresult and redirect the output to a text file as shown in Figure 1 below:

      Directing GPResult data to a text file

      Figure 1. Directing GPResult data to a text file
    3. Enter notepad gp.txt to open the file. Results appear as shown in the figure below.

      Verifying policies with GPResult

      You can also use .html instead of .txt!

    Hey

    I will give this a go.

    Something i noticed was whenever i do a gpupdate /force it says:

    The Group Policy Client Side Extension Folder Redirection was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.

    I log off, run gpupdate /force again and it says the same message, is this normal?

    Monday, June 20, 2016 12:53 PM
  • Yeah we got that stuff too.. Never figured out why.. but my gp's get applied.. ohh and you gotta run the gpupdate on 2 sides huh.. dont forget.

    Monday, June 20, 2016 12:58 PM
  • > I log off, run gpupdate /force again and it says the same message, is
    > this normal?
     
    Yes. As an example - Folder redirection. FR can only be processed at
    logon - imagine you change the redirection path, then a background GP
    Update happens and the documents folder moves to a new location while
    the user is working on some documents...
     
    If you run gpupdate /force, you tell the system "hey apply each and
    every GPO again, do not mind if it has applied once before". This calls
    the FR, but FR refuses to process. But it is happy to tell you that it
    did so :)
     --
    Greetings/Grüße, Martin -
    Mal ein gutes Buch über GPOs lesen? -
    Good or bad GPOs? My blog - http://evilgpo.blogspot.com
    And if IT bothers me? Coke bottle design refreshment -
     
    Monday, June 20, 2016 2:24 PM
  • Done some testing, i have forced a screen saver after 15 minutes and for a password to be required. 

    test 1 - Screen saver come on after 15 mins

    test 2 - same

    test 3 - Screen saver come on after 8 mins

    test 4 - same

    Why is the screen saver not coming on after 15 mins???

    Wednesday, June 22, 2016 8:56 AM
  • Can you show us some evidence to proove that your GPO is being applied correctly and the correct settings have been applied? It was quoted above that you set a user policy and not a computer policy, can you confirm that you have applied this policy to a users "OU" as opposed to a "computers" OU?

    GPO are basically a front end for registry changes, have you tried looking at the relevant settings in the clients machines resgitry to confirm that your policy is being set correctly?

    Thursday, June 23, 2016 11:35 AM