Windows Forum
Okay here goes.
I would like to set up a policy so as when they log onto the domain a policy is pushed out to them setting up a mandatory screen saver and time of say 5 minutes and be password protected.
Please help, hot item
by steve penn
what you need to do is create a policy with poledit. save it as a .POL file on a central server.
setup the default user as the blanket policy you wish to push out.
then on the pc you wish it to be pushed to go to the registry and go to the key:
HKLM/SYSTEM/CURRENTCONTROLSET/CONTROL/UPDATE
add a key called 'NetworkPath' as a string and put the UNC path to the shared foder on the network with the .POL file in it. Now change the 'UpdateMode' to 2.
This will make the PC pick up the policy from the .pol file.
It means that you only have to make changes once to affect multiple users, and you can don't have to lock down each profile.
you may find you need to delete the cached copy of the profile to make it work initially.
hope this helps.
by donbrafford
by cavedweller
I have done this with the NT Security Configuration Manager tool.
I added entries to the end of the default user .adm file to define the screen saver parameters. Export the cluster from the registry and view it with a text editor to see how toname the keys. Use the format of the default .adm file as a syntax guide. Open the SCM, remove the default profile and then add your modified one. Create a new ntconfig.pol and select the entries you want for the screen saver (as well as any other desired setttings). Save the file in the same shared directory as your netlogon scripts. The policy will be automatically applied when users log in. If you already have an ntconfig.pol you can edit it instead and add the new settings. Sorry I don't have a copy of what I added handy or I would attach it.
by donbrafford
by donbrafford
This discussion is closed to new replies.
Sort by Trending