none
Locked session with screensaver (Best choice?) RRS feed

  • Question

  • Hi,

    It's mandatory for us to locked all user sessions after 5 minutes of inactivity.

    At the beggining, we carried out that by enabling the screensaver through GPO.

    Local Computer Policy\User Configuration\Administrative Templates\Control Panel\Display

    • Enable screensaver (Enabled)
    • Force specific screensaver - (scrnsave.scr)
    • Screen saver timeout - (300)
    • Password protect the screen saver (Enabled)

    That has been working nice for Windows 7. but there have been some issues for Windows 8 and specially for Windows 10.

    I noticed that there is another GPO feature to lock the user sessión with the screensaver for Windows 8/8.1 and w2k12,

    Interactive logon: Machine inactivity limit

    How about that option to configure the session locking.

    In the case that both configurations were applied, would that lead to any unexpected results?

    Thank you.


    Wednesday, May 11, 2016 11:51 AM

All replies

  • Hi fedayn2,

    " If the amount of inactive time exceeds the inactivity limit set by this policy, then the user’s session locks by invoking the screen saver. This policy setting allows you to control the locking time by using Group Policy"

    According to the explanation of that gpo, it meets your need very well and it shouldn`t result in any result.
    Interactive logon: Machine inactivity limit
    https://technet.microsoft.com/en-us/itpro/windows/keep-secure/interactive-logon-machine-inactivity-limit

    Whatever, we could try to make a test on a virtual machine before we deployed this gpo.

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Thursday, May 12, 2016 5:54 AM
    Moderator
  • And how about having both screensaver configurations applied to the same workstation? Which of those GPOs will win the race?

    Anyway, there are reported issues with the screensaver timeout resetting to 1 minute for Windows 10 , how about that?



    • Edited by fedayn2 Friday, May 13, 2016 7:31 AM
    Thursday, May 12, 2016 7:14 AM
  • Hi fedayn2,

    I think testing on a virtual machine is the best way to verify whether it will meet your need.

    Best regards


    Please mark the reply as an answer if you find it is helpful.

    If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Wednesday, May 18, 2016 1:37 AM
    Moderator