Terminal Services Session Screen Saver possible to disable?

[Guest Version7]

Our problem is we have a user based group policy that has the following

settings,

 

Password protect the screen saver Enabled

Screen Saver Enabled

Screen Saver timeout Enabled

Number of seconds to wait to enable the Screen Saver

Seconds: 900

 

This locks our users computers after 10 minutes. Since this is a user based

policy this follows the user's when they log into the several terminal

servers. This becomes very annoying for the users to have to unlock there TS

session after 10 minutes when they just unlocked there computer. Is there a

way to superseed the User based group policy and perm disable the Screen

saver on the TS Servers? Or maybe this is not the best solution and there is

a better one.

 

We want to keep a policy in place that automatically locks the users

computers after 10 minutes however we dont want the terminal service sessions

to lock. Is this possible? Thanks

[Guest TP]

Re: Terminal Services Session Screen Saver possible to disable?

 

Hi,

 

Place your TS servers in a separate OU and create a GPO

with the settings you want. Move your TS servers into this

OU. Enable Loopback policy with the Replace option.

 

Add an entry for Deny Apply Group Policy for Domain Admins

to the above GPO security so that your policies will not apply

to admins that logon to the TS.

 

Loopback processing of Group Policy

 

http://support.microsoft.com/kb/231287

 

After you have completed the above users will have a different

GPO applied when they logon to the TS but still have the current

GPO applied when logging on to their local PC.

 

-TP

 

Version7 wrote:

> Our problem is we have a user based group policy that has the

> following settings,

>

> Password protect the screen saver Enabled

> Screen Saver Enabled

> Screen Saver timeout Enabled

> Number of seconds to wait to enable the Screen Saver

> Seconds: 900

>

> This locks our users computers after 10 minutes. Since this is a

> user based policy this follows the user's when they log into the

> several terminal servers. This becomes very annoying for the users

> to have to unlock there TS session after 10 minutes when they just

> unlocked there computer. Is there a way to superseed the User based

> group policy and perm disable the Screen saver on the TS Servers? Or

> maybe this is not the best solution and there is a better one.

>

> We want to keep a policy in place that automatically locks the users

> computers after 10 minutes however we dont want the terminal service

> sessions to lock. Is this possible? Thanks

[Guest Johan Strange]

Re: Terminal Services Session Screen Saver possible to disable?

 

Thats right - GPO is applied Local - Site - Domain - OU - Child

 

"TP" wrote:

> Hi,

>

> Place your TS servers in a separate OU and create a GPO

> with the settings you want. Move your TS servers into this

> OU. Enable Loopback policy with the Replace option.

>

> Add an entry for Deny Apply Group Policy for Domain Admins

> to the above GPO security so that your policies will not apply

> to admins that logon to the TS.

>

> Loopback processing of Group Policy

>

> http://support.microsoft.com/kb/231287

>

> After you have completed the above users will have a different

> GPO applied when they logon to the TS but still have the current

> GPO applied when logging on to their local PC.

>

> -TP

>

> Version7 wrote:

> > Our problem is we have a user based group policy that has the

> > following settings,

> >

> > Password protect the screen saver Enabled

> > Screen Saver Enabled

> > Screen Saver timeout Enabled

> > Number of seconds to wait to enable the Screen Saver

> > Seconds: 900

> >

> > This locks our users computers after 10 minutes. Since this is a

> > user based policy this follows the user's when they log into the

> > several terminal servers. This becomes very annoying for the users

> > to have to unlock there TS session after 10 minutes when they just

> > unlocked there computer. Is there a way to superseed the User based

> > group policy and perm disable the Screen saver on the TS Servers? Or

> > maybe this is not the best solution and there is a better one.

> >

> > We want to keep a policy in place that automatically locks the users

> > computers after 10 minutes however we dont want the terminal service

> > sessions to lock. Is this possible? Thanks

>

[Guest Version7]

Re: Terminal Services Session Screen Saver possible to disable?

 

Thanks a lot this works perfect. I never used this loopback option before,

Used correctly this is very powerful.

 

"TP" wrote:

> Hi,

>

> Place your TS servers in a separate OU and create a GPO

> with the settings you want. Move your TS servers into this

> OU. Enable Loopback policy with the Replace option.

>

> Add an entry for Deny Apply Group Policy for Domain Admins

> to the above GPO security so that your policies will not apply

> to admins that logon to the TS.

>

> Loopback processing of Group Policy

>

> http://support.microsoft.com/kb/231287

>

> After you have completed the above users will have a different

> GPO applied when they logon to the TS but still have the current

> GPO applied when logging on to their local PC.

>

> -TP

>

> Version7 wrote:

> > Our problem is we have a user based group policy that has the

> > following settings,

> >

> > Password protect the screen saver Enabled

> > Screen Saver Enabled

> > Screen Saver timeout Enabled

> > Number of seconds to wait to enable the Screen Saver

> > Seconds: 900

> >

> > This locks our users computers after 10 minutes. Since this is a

> > user based policy this follows the user's when they log into the

> > several terminal servers. This becomes very annoying for the users

> > to have to unlock there TS session after 10 minutes when they just

> > unlocked there computer. Is there a way to superseed the User based

> > group policy and perm disable the Screen saver on the TS Servers? Or

> > maybe this is not the best solution and there is a better one.

> >

> > We want to keep a policy in place that automatically locks the users

> > computers after 10 minutes however we dont want the terminal service

> > sessions to lock. Is this possible? Thanks

>