locked
Lock screen PC doesn't work properly RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi all,
    I have trouble with a group policy that set Lock Screen timeout.

    I would that after 5 minutes of inactivity (user doesn't use laptop/computer for five minutes), Windows lock PC and ask password.

    I have configured this policy in this way:

    The issues is that some client compliant that pc lock only after than 1 minute (some users says 30 seconds!)
    How can I fix it? Have someone some suggestions?

    Thanks

    Friday, July 24, 2020 10:44 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Based on my understanding , the policies were applied ,right?

    Did you check the result by the command: gpresult /h report.html.

    I would recommend you if tried the following policy under Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options:Interactive logon: Machine inactivity limit 

    and set the time to the same as  Lock Screen timeout. value.

    Best Regards,


    Please remember to mark the replies as an answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Monday, July 27, 2020 1:56 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Welcome to share your current situation.

    Please feel free to let us know if you need further assistance.

     

    Best Regards,

    Please remember to mark the replies as an answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Wednesday, July 29, 2020 12:11 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi flingmin,

    I will try to control GPO downloaded by client and I will give you a feedback 

    Thanks!

    Sunday, August 2, 2020 7:49 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    You are welcome.

    Welcome to share here ,if there are any updates.

    Fan 

    Please remember to mark the replies as an answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Sunday, August 2, 2020 11:41 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,
    I know that another laptop inside the company has got the same problem.
    I have checked and I have seen that this laptop has downloaded with success the Gpo, in fact inside control panel of this client settings "talk" about 5 minutes and not 30 seconds!

    The following photos is about rsop.msc that I have generated from this client (sorry if it is in italian):

    You suggest to create a new group policy with this settings:
    Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options:Interactive logon: Machine inactivity limit?

    Do you suggest me to replace this Group Policy with your or to merge these two rules?

    Is there a way to fix this problem?

    Thanks for your time and help!



    Monday, August 3, 2020 12:40 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello @flingmin,

    Today I have more test with one of two clients Windows 10 Pro that has got this issue about "Timeout Lock Screen".

    I decided to disabled Domain Group Policy just to troubleshoot.
    I was really surprised due to this computer continue to lock after just 30 seconds!

    After different checks, I have found a Local Group Policy (Win+R > gpedit.msc) that "overwrite" my Domain Group Policy and the policy is the one that you suggested to me

    Computer Configuration\Windows Settings\Security 
Settings\Local Policies\Security Options:Interactive logon: 30 seconds

    I modify the value to 0 but now laptop never lock screen, because 0 means "never lock screen"
    I need to restore original value all "Local Group Policy" to be sure that there isn't "fight" between Local GP and Domain GP on this laptop.

    This is an article about how to reset GP on computer:
    https://www.maketecheasier.com/reset-group-policy-settings-windows10/

    Default value of "Interactive logon" is "Not defined"


    Thanks for your support!
    Federico



    Monday, August 3, 2020 8:14 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hi,Federico

    I'm glad that you find out the issue!
    Please feel free to let us know if you need further assistance!

    Best Regards


    "Group Policy" forum will be migrating to a new home on Microsoft Q&A!

    We invite you to post new questions in the "Group Policy"  forum's new home on Microsoft Q&A!

    For more information, please refer to the sticky post.



    Tuesday, August 4, 2020 1:59 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    I have a doubt:

    Does "Domain Policy" become a "Local Policy" on client side computer download it? Or are they always separated?

    After that, do you suggest to create one GP with both settings (computer level and user level)?

    Thanks!

    Tuesday, August 4, 2020 5:30 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    I'm not sure i understand you clearly or not , if not ,please let me know.

    The local GPO and the Domain GPO are separated, Local GPOs were applied earlier ,and and the domain GPO will  overwrites the local GPO(it means when the same settings are configured on both the local policy and domain policy) .

    If you want to use the settings Interactive logon: Machine inactivity limit,then the Group Policy User Configuration\Administrative Templates\Control Panel\Personalization\Enable screen saver should also be configured.

    Fa

    Please remember to mark the replies as an answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Tuesday, August 4, 2020 6:30 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,
    Thanks for your reply.

    The local GPO and the Domain GPO are separated, Local GPOs were applied earlier ,and and the domain GPO will  overwrites the local GPO(it means when the same settings are configured on both the local policy and domain policy) .

    I have understood me. Your answare is very clear, thanks so much.

    If you want to use the settings Interactive logon: Machine inactivity limit,then the Group Policy User Configuration\Administrative Templates\Control Panel\Personalization\Enable screen saver should also be configured.

    Do you suggest this rule as an alternative to the one I configured? Or to combine with the configured one?
    In addition, the suggested policy is at the computer level, so I have to apply it to the computer OU. Right?

    Thanks!
    Federico

    Tuesday, August 4, 2020 8:47 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

     You can considered it as an alternative option.

    Yes, you are right ,the policy have to apply to the computer OU.

    Fan

    Please remember to mark the replies as an answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Wednesday, August 5, 2020 6:48 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    just a final question.

    Do you know if a domain policy abandoned and not more linked, on client side will be a local a group policy?

    Thanks
    Federico

    Wednesday, August 5, 2020 4:15 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hi,

    If A domain policy was no more linked, the the policy would not be applied on the client side.
    As said before, GPOs are processed in the following order:
    The local GPO ,Site GPO,Domain GPO,OU GPO,child organizational units GPO
    GPO overwrites policy that was applied earlier only when there was a conflict on the same settings, 
    If different settings configured on separated level, it will not effect each other.


    Best Regards,
    Fan



    "Group Policy" forum will be migrating to a new home on Microsoft Q&A!

    We invite you to post new questions in the "Group Policy"  forum's new home on Microsoft Q&A!

    For more information, please refer to the sticky post.

     


    Thursday, August 6, 2020 8:06 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Perfect!

    Best regards

    Federico

    Thursday, August 6, 2020 11:25 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

     

    If the reply helped you, please remember to mark it as an answer.

    If no, please reply and tell us the current situation in order to provide further help

     

    Best Regards,

    Fan

    Please remember to mark the replies as an answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Friday, August 7, 2020 1:26 AM