Time until Ctrl+Alt+Del Lock

[enjay]

Can someone tell me where you specify how long a computer waits before the Ctrl+Alt+Del lock screen activates. Thanks!

[Michael]

The GPOs you're looking for are under: User Config > Admin Templates > Control Panel > Display

 

Screen Saver Timeout is the main policy.

 

If you're talking about Ctrl+alt+del at logon, this is hard coded into Windows and cannot be changed (as far as I am aware), however you can disable the need for Ctrl+alt+del making it easier for younger pupils for example.

[FN-GM]

Can someone tell me where you specify how long a computer waits before the Ctrl+Alt+Del lock screen activates. Thanks!

 

Do you mean locking the screen after a user has logged on? If this is the case it is done by the screensaver timeout above.

 

I have found the group policy is hit and miss in Windows 7 and i had to do it in the registry.

[enjay]

To clarify, I do mean the one which locks a logged in computer after x minutes of inactivity.

 

The GPOs you're looking for are under: User Config > Admin Templates > Control Panel > Display

 

Screen Saver Timeout is the main policy.

 

That option isn't listed there. The only things under Control Panel > Display are "Disable the Display Control Panel" and "Hide the settings tab".

[localzuk]

I've just checked on our AD, the item should be where Michael says. It is called 'Screen Saver timeout' under the User Configuration option. So I'm not sure why you're not seeing it!

[Michael]

I know for a fact (showing my age here), that GPO has been available since Windows 2000 Server and hasn't changed in 2003 or 2008. Not sure about 2012.

 

If necessary, create a new GPO then link it where it's required.

[enjay]

Definitely not in that path. That said, I have just found it - it is under User Config > Policies > Admin Templates > Control Panel > Personalisation > "Screen Saver Time Out" and "Password Protect the Screen Saver".

[Michael]

That's the one, they've moved in it 2008/2008 R2 (by the sounds of things)

[Marches]

Is it possible to set this policy for locking computers and not have a screen saver?

 

we don't have one at the moment and don't really want one however we do want to lock after a period of inactivity.

[localzuk]

No, I don't think so, as it is the screensaver process that is doing the locking. You could have a 'blank' screensaver though.

[enjay]

Is it possible to set this policy for locking computers and not have a screen saver?

 

we don't have one at the moment and don't really want one however we do want to lock after a period of inactivity.

 

Why don't you want a screensaver? If your power management is set correctly, it won't be on screen for long anyway, as the monitor would turn off after 15 minutes (or whatever) of inactivity.

[Michael]

No, I don't think so, as it is the screensaver process that is doing the locking. You could have a 'blank' screensaver though.

 

@Marches - This is correct, it is the screensaver mechanism which counts up until the amount of inactivity starts the screensaver, then locks the machine.

[Marches]

Its a case of we don't currently have a screensaver or any time or inclination to make one. I will have a play with setting a black screen saver and will have to check the power settings.

[enjay]

In honesty, it takes about 3 minutes to go into Group Policy and add a screen-saver which scrolls your school name across the screen. Set that, tick the "password protected screensaver" option and apply it. Only do that for staff members, of course, otherwise the kids will leave themselves logged in and lock computers out for a giggle.