+ Reply to Thread
Results 1 to 8 of 8

Thread: Screen Saver Lockout for Staff - Preventable on certain systems?

  Share/Bookmark
  1. #1

    Reputation
    link470's Avatar
    Join Date
    Nov 2007
    Location
    Canada
    Posts
    195
    Thank Post
    65
    Thanked 5 Times in 3 Posts
    Rep Power
    7

    Post Screen Saver Lockout for Staff - Preventable on certain systems?

    So last night I decided I'd enable a Screen Saver lockout policy. All Screen Savers in the building for staff accounts only lock out after 5 minutes. I taught them the Windows Key + L combination for locking their systems last year and you guys as systems engineers as well would know how many people actually do that, I'll give you a hint, it's less than 5

    So I enabled the Screen Saver policy. Of course, it's now the next morning, and I've received one complaint. The only complaint was that the office staff didn't want it. What was funny about that was they said "ya we just get up and go to the file room for a second and get some files, go to put my lunch away in the fridge, and then come back, and it's locked and we have to type in our password" as I give them a rather blank look thinking to myself "yes, there lies the vulnerability, that's why it's locked. I'm sorry I took a second out of your day to retype it and secure your system while you left it " Oh well, I bumped it up to 10 minutes for them, we'll see how it goes.

    So anyways, what I'm wondering is, well, first off, what are your opinions and successes of the lockout policy? I enabled it first off because of course we have some people called students in the building and as charming as a lot of them are, as a security precaution I prefer the systems with raised privileges, the staff, have a locked system. What are your stories about using the Screen Saver and a wake up password prompt?

    Ok, now for the question. The teachers can log into projector laptops, as can the students. Since the GPO is applied to all staff, if the staff log into a laptop, the policy still applies. Now, for PowerPoint and Windows Media Player, that's not a problem, because as far as I know those programs temporarily disable the Screen Saver, but if the teacher has a word document up on the screen or something with notes for the students, or even a youtube clip, the screen saver will activate after 5 minutes. Is there a way to NOT apply the policy IF the teachers are signed into a certain system? I know that might be hard, and I have bad experience with loopback policies screwing things up, but if anyone has similar situations or suggestions that would be totally rad.

    Thanks again! Stay cool. It's getting hot out here where I live. Thank God the server room is the coolest place in the building due to AC.

  2. #2

    Reputation
    Reputation Reputation Reputation Reputation Reputation Reputation Reputation Reputation
    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    5,115
    Thank Post
    104
    Thanked 749 Times in 570 Posts
    Rep Power
    150

    Default

    As you have found, enabling the screensaver lockout policy is a good procedure to adhere to, but in reality it can create real problems - especially with interactive whiteboards. If the teacher is using an interactive pen or moving the mouse it's fine, but typically teachers may then leave something on the whiteboard for children to copy (for example). 5 minutes won't be enough and then the screensaver kicks in...

    There's no real solution to this, so I have no choice but to set teachers to an hour of lockout. Admin staff are locked out every 30 mins. You need to get the balance right in terms of keeping secure but not annoying your users (very important). It's also important for teachers to know they have higher access rights than children and they have a duty of care to protect data stored on staff common areas.

  3. #3

    Reputation Reputation Reputation Reputation Reputation Reputation
    DrPerceptron's Avatar
    Join Date
    Dec 2008
    Location
    In a house
    Posts
    650
    Thank Post
    19
    Thanked 78 Times in 67 Posts
    Rep Power
    23

    Default

    You can disable it for certain systems, you'll just have to enable Loopback Merge Mode - we used to have the setup here, however we've just gone back to having a blanket lockout.

    If people don't want the lockout, we offer 15, 30 and 60 minute versions of the lockouts, but ultimately, it will remain. New staff appear to just agree with the system and older staff will know why it's in place - data protection apparently isn't something teachers cared about too much...

  4. #4

    Reputation
    link470's Avatar
    Join Date
    Nov 2007
    Location
    Canada
    Posts
    195
    Thank Post
    65
    Thanked 5 Times in 3 Posts
    Rep Power
    7

    Default

    Quote Originally Posted by DrPerceptron View Post
    If people don't want the lockout, we offer 15, 30 and 60 minute versions of the lockouts, but ultimately, it will remain. New staff appear to just agree with the system and older staff will know why it's in place - data protection apparently isn't something teachers cared about too much...
    That's the problem I'm having here and expected. Only a couple complaints so far, but to be expected. I'm trying some things and am going to revert back to no screen saver policy for a couple days while I test some systems. To revert back, I can't just set those policies to Not Defined again can I? Cause won't whatever was applied last stay? Do I need to set them as disabled if I wish to remove it?

  5. #5

    Reputation Reputation

    Join Date
    Aug 2007
    Posts
    284
    Thank Post
    23
    Thanked 22 Times in 15 Posts
    Rep Power
    10

    Default

    15min here for 4 years now...

    Regular complaints from the science staff that when playing a 30min movie they have to move the mouse once in that time !

    The wmp disable screensaver doesnt seem to work here, if it does that would be great !

  6. #6

    Reputation Reputation Reputation Reputation Reputation Reputation
    DrPerceptron's Avatar
    Join Date
    Dec 2008
    Location
    In a house
    Posts
    650
    Thank Post
    19
    Thanked 78 Times in 67 Posts
    Rep Power
    23

    Default

    I think you can just set them back to not set, It's been a long while since I turned a group policy setting off, so can't remember - usually when it's not configured, it acts in its default state.... which is explained in the explanation of the object.

    Can't say I've experienced the WMP disable of screensavers either, would definately be handy to know about though

  7. #7

    Reputation Reputation Reputation Reputation Reputation Reputation Reputation Reputation Reputation Reputation Reputation Reputation Reputation
    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    2,443
    Thank Post
    155
    Thanked 307 Times in 229 Posts
    Rep Power
    87

    Default

    I think it would be possible to write a VB script which looked at the machine name and altered the appropriate registry settings accordingly. I've not got time to do it, but I'm pretty certain it's achievable.

    Mike.

  8. #8

    Reputation Reputation Reputation Reputation Reputation Reputation Reputation Reputation Reputation

    Join Date
    Feb 2006
    Location
    Derbyshire
    Posts
    1,374
    Thank Post
    175
    Thanked 207 Times in 168 Posts
    Rep Power
    53

    Default

    Maybe as an alternative, install one of the 'hot corners' apps on the projector laptops - the little freeware apps that disable the screensaver if the mouse is left in a specific corner of the screen...

    Edit - Something like this - http://programsforpeers.googlepages.com/hotcorners
    Last edited by OutToLunch; 05-06-2009 at 09:08 AM.

+ Reply to Thread

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

     

Similar Threads

  1. Replies: 2
    Last Post: 28-03-2008, 05:45 PM
  2. Vista Flip Screen Saver
    By mattx in forum Scripts
    Replies: 0
    Last Post: 13-12-2007, 12:14 PM
  3. VIsta Home Basic - No Screen Saver
    By jcryan1 in forum Windows Vista
    Replies: 3
    Last Post: 03-07-2007, 04:27 PM
  4. BlueScreen Screen Saver
    By webman in forum Other Stuff
    Replies: 6
    Last Post: 31-05-2007, 03:25 PM
  5. Screen-Saver Editor
    By alan-d in forum Downloads
    Replies: 3
    Last Post: 07-08-2006, 09:32 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts