Setting screen lock time

[IT_Man_Dan]

Afternoon all,

 

On this network no matter what setting via GPO I set to lock workstations it seems to not apply the GPO on a workstation and just always lock workstation after 5 mins of inactivity.

 

I've tried tweaking the settings under User >Admin Templates > Control panel > personalisation but absolutely nothing applies.

 

I've also tried setting Computer > Windows Settings > Security settings > security options > interactive logon: Machine inactivity limit.

Again nothing happens.

With both above settings it's just as if I've not set anything and the computers lock after 5 mins...

 

It's starting to wind me up as I want to set different lock times for offices etc.

I'm running Win server 2019 with win 10 workstations 1909 build.

 

Has anyone else had an issue like this and if so have you been able to resolve?

Maybe in the power options or something?

 

Many thanks

[LeMarchand]

I've tried tweaking the settings under User >Admin Templates > Control panel > personalisation but absolutely nothing applies.

 

That's where we do it, though haven't had any complaints recently - maybe it's not working on W10!

 

 

We do have loopback enabled in the policy as it applies to a machine OU rather than a user one. (Not sure if that makes any difference).

[IT_Man_Dan]

Thanks for your reply.

I also have it linked to a computer OU so have loopback enabled.

Here's my settings which aren't working.

[MartinByard]

It's showing the User section of that GPO as being disabled .... could that be your issue (presuming you didn't disable it as it didn't seem to be working) ?

[IT_Man_Dan]

It's showing the User section of that GPO as being disabled .... could that be your issue (presuming you didn't disable it as it didn't seem to be working) ?

 

Hi,

Thanks for noticing, That certainly won't have been helping (I disabled it earlier as was playing around a bit and forgot to reenable). I've re enabled it but still no lock out after 60 seconds currently.

 

Many thanks

[MartinByard]

Only other suggestion I've got off the top of my head, is it's not able to run the specific screensaver you're trying to get it use (most likely due to not finding the file specified). Try specifiying a different screensaver, or try fully qualifying the file path ( %windir%\system32\rundll32.exe user32.dll,LockWorkStation )

[thimon]

We've set ours via Power Options. Computer config > Preferences > Control Panel Settings > Power Options > Power Plan > Turn off display after: After 15 minutes. This works fine for us.

[LeMarchand]

We've set ours via Power Options. Computer config > Preferences > Control Panel Settings > Power Options > Power Plan > Turn off display after: After 15 minutes. This works fine for us.

 

Does that lock as well?

[thimon]

Does that lock as well?

 

It does yes. I’ll check our GPO’s tomorrow to see if there’s anything else in place that locks it. I’ll let you know what I find.

[thimon]

Does that lock as well?

The only other setting I could find is the following: Computer config > Preferences > Control Panel Settings > Power Options > Power Plan > Require a password on wakeup: Yes

[IT_Man_Dan]

Just to update.

This problem is now resolved.

In all honesty after reenabling the disabled user config (thanks @MartinByard for noticing) then the policy applied this morning after a complete reboot. After changing the policy yesterday I'd only done a gpupdate /force not a reboot.

Lesson learnt...

 

Thanks all.