Terminal Services Session Screen Saver possible to disable?

  • Thread starter Thread starter Version7
  • Start date Start date
V

Version7

Guest
Our problem is we have a user based group policy that has the following
settings,

Password protect the screen saver Enabled
Screen Saver Enabled
Screen Saver timeout Enabled
Number of seconds to wait to enable the Screen Saver
Seconds: 900

This locks our users computers after 10 minutes. Since this is a user based
policy this follows the user's when they log into the several terminal
servers. This becomes very annoying for the users to have to unlock there TS
session after 10 minutes when they just unlocked there computer. Is there a
way to superseed the User based group policy and perm disable the Screen
saver on the TS Servers? Or maybe this is not the best solution and there is
a better one.

We want to keep a policy in place that automatically locks the users
computers after 10 minutes however we dont want the terminal service sessions
to lock. Is this possible? Thanks
 
Re: Terminal Services Session Screen Saver possible to disable?

Hi,

Place your TS servers in a separate OU and create a GPO
with the settings you want. Move your TS servers into this
OU. Enable Loopback policy with the Replace option.

Add an entry for Deny Apply Group Policy for Domain Admins
to the above GPO security so that your policies will not apply
to admins that logon to the TS.

Loopback processing of Group Policy

http://support.microsoft.com/kb/231287

After you have completed the above users will have a different
GPO applied when they logon to the TS but still have the current
GPO applied when logging on to their local PC.

-TP

Version7 wrote:
> Our problem is we have a user based group policy that has the
> following settings,
>
> Password protect the screen saver Enabled
> Screen Saver Enabled
> Screen Saver timeout Enabled
> Number of seconds to wait to enable the Screen Saver
> Seconds: 900
>
> This locks our users computers after 10 minutes. Since this is a
> user based policy this follows the user's when they log into the
> several terminal servers. This becomes very annoying for the users
> to have to unlock there TS session after 10 minutes when they just
> unlocked there computer. Is there a way to superseed the User based
> group policy and perm disable the Screen saver on the TS Servers? Or
> maybe this is not the best solution and there is a better one.
>
> We want to keep a policy in place that automatically locks the users
> computers after 10 minutes however we dont want the terminal service
> sessions to lock. Is this possible? Thanks
 
Re: Terminal Services Session Screen Saver possible to disable?

Thats right - GPO is applied Local - Site - Domain - OU - Child

"TP" wrote:

> Hi,
>
> Place your TS servers in a separate OU and create a GPO
> with the settings you want. Move your TS servers into this
> OU. Enable Loopback policy with the Replace option.
>
> Add an entry for Deny Apply Group Policy for Domain Admins
> to the above GPO security so that your policies will not apply
> to admins that logon to the TS.
>
> Loopback processing of Group Policy
>
> http://support.microsoft.com/kb/231287
>
> After you have completed the above users will have a different
> GPO applied when they logon to the TS but still have the current
> GPO applied when logging on to their local PC.
>
> -TP
>
> Version7 wrote:
> > Our problem is we have a user based group policy that has the
> > following settings,
> >
> > Password protect the screen saver Enabled
> > Screen Saver Enabled
> > Screen Saver timeout Enabled
> > Number of seconds to wait to enable the Screen Saver
> > Seconds: 900
> >
> > This locks our users computers after 10 minutes. Since this is a
> > user based policy this follows the user's when they log into the
> > several terminal servers. This becomes very annoying for the users
> > to have to unlock there TS session after 10 minutes when they just
> > unlocked there computer. Is there a way to superseed the User based
> > group policy and perm disable the Screen saver on the TS Servers? Or
> > maybe this is not the best solution and there is a better one.
> >
> > We want to keep a policy in place that automatically locks the users
> > computers after 10 minutes however we dont want the terminal service
> > sessions to lock. Is this possible? Thanks
>
 
Re: Terminal Services Session Screen Saver possible to disable?

Thanks a lot this works perfect. I never used this loopback option before,
Used correctly this is very powerful.

"TP" wrote:

> Hi,
>
> Place your TS servers in a separate OU and create a GPO
> with the settings you want. Move your TS servers into this
> OU. Enable Loopback policy with the Replace option.
>
> Add an entry for Deny Apply Group Policy for Domain Admins
> to the above GPO security so that your policies will not apply
> to admins that logon to the TS.
>
> Loopback processing of Group Policy
>
> http://support.microsoft.com/kb/231287
>
> After you have completed the above users will have a different
> GPO applied when they logon to the TS but still have the current
> GPO applied when logging on to their local PC.
>
> -TP
>
> Version7 wrote:
> > Our problem is we have a user based group policy that has the
> > following settings,
> >
> > Password protect the screen saver Enabled
> > Screen Saver Enabled
> > Screen Saver timeout Enabled
> > Number of seconds to wait to enable the Screen Saver
> > Seconds: 900
> >
> > This locks our users computers after 10 minutes. Since this is a
> > user based policy this follows the user's when they log into the
> > several terminal servers. This becomes very annoying for the users
> > to have to unlock there TS session after 10 minutes when they just
> > unlocked there computer. Is there a way to superseed the User based
> > group policy and perm disable the Screen saver on the TS Servers? Or
> > maybe this is not the best solution and there is a better one.
> >
> > We want to keep a policy in place that automatically locks the users
> > computers after 10 minutes however we dont want the terminal service
> > sessions to lock. Is this possible? Thanks
>
 
Back
Top