J
Joey MCAT
Guest
Hello community,
I'm an IT Admin at a company, however I have limited access over the deployment and configuration of GPOs at the highest level. I was wondering if anyone can help me in overriding some company group policies.
First off I've been looking online and could find a few ideas, but with no detailed description on how to implement or automate them.
The problem is we have a screen saver that I think was added on the backend on the Domain Computers gpo, because I have removed the GPO "enforce company screen saver" from the Members list on specific computers and it didn't do anything. The screen saver still shows up after a couple minutes of inactivity.
Also when I try to open it through the traditional way (right click on desktop + Personalization) the screen saver option is missing. If I search "Screen saver" in the Find a setting box it will open up the Screen Saver Settings box but the Screen saver part (where you can choose which screen saver runs and after how many minutes of inactivity) is greyed out.
Secondly I've tried editing the following settings through gpedit.msc: User Configuration > Administrative Templates > Control Panel > Personalization:
Enable screen saver - switched to Disabled
Prevent changing screen saver - switched to Disabled
Screen saver timeout - switched to Enabled and set to 86400 seconds (24hours)
Force a specific screen saver - switched to Disabled
The other thing I have tried was to edit settings through regedit as an admin account and created the following:
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System:
-Added new DWORD named NoDispScrSavPage and set the value to 0
Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System:
-Changed the value of the DWORD named NoDispScrSavPage from 1 to 0
-Added new DWORD name NoDispCPL and set the value to 0
The screen saver still shows up after ~5 minutes of inactivity which is annoying cause I can't look away from the monitor because then I have to sign into the account again, every time.
The request is, as I've seen some suggestions online, to create a batch file that overrides the gpos and changes these settings to disable the screen saver for good and for it to run (through task scheduler maybe?) right after the login and right after the Group Policy client finishes applying the policy.
However the questions are:
After you make any changes in gpedit.msc shouldn't you use gpupdate/force for them to apply?
If yes, then you will get back the settings that are pushed through company GPOs, right?
How could this be implemented to bypass or override the company's GPOs and also apply them without having to push the changes through gpupdate/force so you can actually keep the settings without the ones configured at the organization level to come back and override your changes?
Thank you in advance for helping.
More...
I'm an IT Admin at a company, however I have limited access over the deployment and configuration of GPOs at the highest level. I was wondering if anyone can help me in overriding some company group policies.
First off I've been looking online and could find a few ideas, but with no detailed description on how to implement or automate them.
The problem is we have a screen saver that I think was added on the backend on the Domain Computers gpo, because I have removed the GPO "enforce company screen saver" from the Members list on specific computers and it didn't do anything. The screen saver still shows up after a couple minutes of inactivity.
Also when I try to open it through the traditional way (right click on desktop + Personalization) the screen saver option is missing. If I search "Screen saver" in the Find a setting box it will open up the Screen Saver Settings box but the Screen saver part (where you can choose which screen saver runs and after how many minutes of inactivity) is greyed out.
Secondly I've tried editing the following settings through gpedit.msc: User Configuration > Administrative Templates > Control Panel > Personalization:
Enable screen saver - switched to Disabled
Prevent changing screen saver - switched to Disabled
Screen saver timeout - switched to Enabled and set to 86400 seconds (24hours)
Force a specific screen saver - switched to Disabled
The other thing I have tried was to edit settings through regedit as an admin account and created the following:
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System:
-Added new DWORD named NoDispScrSavPage and set the value to 0
Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System:
-Changed the value of the DWORD named NoDispScrSavPage from 1 to 0
-Added new DWORD name NoDispCPL and set the value to 0
The screen saver still shows up after ~5 minutes of inactivity which is annoying cause I can't look away from the monitor because then I have to sign into the account again, every time.
The request is, as I've seen some suggestions online, to create a batch file that overrides the gpos and changes these settings to disable the screen saver for good and for it to run (through task scheduler maybe?) right after the login and right after the Group Policy client finishes applying the policy.
However the questions are:
After you make any changes in gpedit.msc shouldn't you use gpupdate/force for them to apply?
If yes, then you will get back the settings that are pushed through company GPOs, right?
How could this be implemented to bypass or override the company's GPOs and also apply them without having to push the changes through gpupdate/force so you can actually keep the settings without the ones configured at the organization level to come back and override your changes?
Thank you in advance for helping.
More...