Allow regular user to unlock screensaver locked computer

[MartyG]

We have the problem that in a multiuser environment users either lock their computers, or have the screensaver automatically lock it, and leave the workstation. As a result, nobody else can use that computer. By default, only the current user or an adminstrator can unlock the computer. I would like to allow select users who don't have administrator access to unlock the computer.

 

Is there a group policy or Windows Security setting that would allow some of my users (i.e. non administators) to unlock a workstation?

 

So far all I can find is a third party application ( Link removed in case the program can be used by employees at companies with lax security settings) This program seems to do the trick but I obviously would prefer to do this through GP.

 

Note: I don't want to let just anyone to unlock the computer - I want to be able to select only some users.

 

Any suggestions?

[ONY]

Hiya and Welcome to Extreme Tech Support - Free PC Help Marty.

Please be patient and someone will be along to assist you.

[RandyL]

Hi Marty;

 

I understand what you are asking but there is a potential problem with it.

 

If a user could unlock it then they would have full access to other users accounts. This is not a good idea for security reasons.

 

As for if it's possible and how to do it I'll let one of the techs handle that but you would have to have full administrator rights to do it.

 

RandyL

[AdvancedSetup]

There is no policy or setting to allow this. This company has written special software that works in conjunction with the logon process.

 

There may be something out there for free but I've not seen it myself.

[help4me]

I would suggest that instead of screensaver locks, everyone has their own user account. At my work place we have two computers for 12 teachers to share. Each of has our own user account set by name and employee number to start (after the initial log in... we can change our username and password for future log in's). Any information we enter into the agency system (i.e. student files) is time stamped along with our name. We must also be logged in to our own user account to access our work email. When we're done with the computer, we of course have to log out. This method is a safegaurd for the agency. If there are errors in the agency files... administration can tell who made the mistake, and contact them to correct it, which is handy for an agency that has teachers spreading over numerous cities, but yet need to be connected to the same agency network.