![]() Indeed, these days it is highly unlikely that someone could tolerate a situation whereby they are greeted with anything but their favourite visual or a specified set of functions when starting their work on a Win 10 PC.Īll this luxury is a far cry from what we had earlier: in ancient versions of Windows, Microsoft’s customers had no alternative but to put up with the tech giant’s decision to stick to the boring lock function some of us remember too well. To start with, Windows 10 users are literally spoilt for choice: there are lots of options to choose from when tailoring the Lock screen. Customizing this feature, by common consent, is a great opportunity to add a creative touch to your device. There is no getting away from it: your Lock screen is supposed to be a highly personalized experience these days. ![]() Using Item Level Targeting, set for each parameter that the policy must not be applied for the specific security group (the user is not a member of the security group grp_not-lock-prod).‘First you harmonize, then you customize’ Create the registry parameters described above in the corresponding GPO section ( User Configuration -> Preferences -> Windows Settings -> Registry). Force specific screen saver is a REG_SZ parameter with the name ScreenSaveActive = 1 and SCRNSAVE.EXE = scrnsave.scrĬreate a domain security group ( grp_not-lock-prod) for which you want to disable the screen lock policy and add users to it.Screen saver timeout is a REG_SZ parameter with the name ScreenSaveTimeout = 300.Password protect the screen saver is a REG_SZ parameter with the name ScreenSaverIsSecure = 1.They are located in the HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop: The following registry parameters match the policies discussed above. You can configure computer lock settings using the registry instead of GPO, and deploy the corresponding registry settings to users’ computers via GPO. To implement such a strategy, you may use the GPO Security Filtering (see the example with restricting access to USB devices using GPO) or Item Level Targeting in GPP. For example, the screens of office workers should be locked after 10 minutes, and the screens of production or SCADA operators should never be locked. In some cases, you may need to configure different lock policies for different user groups. The policy is called Interactive logon: Machine inactivity limit and you can find it in Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options. ![]() In Windows Server 2012/Windows 8 or newer, there is a separate computer security policy that sets a computer inactivity time after which it is locked. After the GPO has been applied, screen saver and screen lock settings will be protected from editing in the Windows interface, and user sessions will be locked in 5 minutes of inactivity (to diagnose how the GPO is applied, you can use gpresult tool and the article following this link).
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |