Where does this GP fall on the client?

I will assume that the laptops were "connected to the domain" at some point to have the GP applied. If they are still on-site then you could use GP to reverse the setting on all at once by re-connecting them after placing them in a new OU with the GP.

If that is not an option (which sounds like the case) then here is the Group Policy Registry Reference Table:

http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/windows/2000/server/reskit/en-us/gp/gpref.asp

Note the ScreenSaveActive, ScreenSaverIsSecure, SCRNSAVE.EXE, and ScreenSaveTimeout are at:

(HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop)

Good Luck,

razz

I have looked at that and tried making the changes to the Reg but to no avail. The Prompt for passowrd is still checked and greyed out. These laptops are off site and will not hook onto the domain for a few more months throught a vpn connection. At that point we can make a separate OU and take care of the issue, but until then i need to find this :)

Thanks!

Can you drop the laptops from the domain. This is information I found on MS' site.

http://www.microsoft.com/technet/community/chats/trans/windowsnet/wnet_092904.mspx

MSFT Mark Williams (Expert):
Q: How long does a cached domain policy remain in effect on a laptop once it is disconnected from the network? In effect, does the local policy become in effect after a period of time?
A: The GPO's are not "cached" per se. They are applied and the appropriate elements of the registry (using admin templates as an example). They are applied when the laptop has connectivity to the domain controller and will remain in effect until the machine either receives an update to policy (reconnects to a DC) or the machine is removed from the domain.

Sorry it took so long to get back to you but here is the answer. I just tried this and it does work. Your are correct in that I tried editing those 4 registry entries. I set the active and secure ones to 0 and then left the others at 15 and logon.scr. They still showed as on. So, I deleted the 4 entries. They did not exist until the policy was set so no problem and it worked. As always backup the reg first and be carefull.

Good Luck,
razz