How do you prevent workstations in a server 2003 domain from locki

[Just Guessing]

On a Windows server 2003 domain, how do you prevent workstations from
entering a "locked" state. The user must hit CTRL-ALT-DEL and log back in
after a certain time period. The user will get a window indicating "this
workstation has been locked . . . "

I'm sure this is a group policy thing, but I can't find it. Thanks!

 

[Roberto Di'Lello]

You could modify this: GP, User Configuration, Windows Settings,
Administrative Templates, System, Power Management, Prompt for password on
resume from hibernate /suspend. And the other value that you could modify
is: Administrative templates\control panel\display\password protect the
screen saver and screen saver timeout.

Regards.

--
--
Roberto Di'Lello | MCSE 2003 - MCSA Messaging 2003 - MCTS |
roberto.dilello@radians.com.ar | www.radians.com.ar


"Just Guessing" <JustGuessing@discussions.microsoft.com> escribió en el
mensaje de noticias:1923430C-9D38-4C5C-82B4-E37C754CEE30@microsoft.com...
> On a Windows server 2003 domain, how do you prevent workstations from
> entering a "locked" state. The user must hit CTRL-ALT-DEL and log back in
> after a certain time period. The user will get a window indicating "this
> workstation has been locked . . . "
>
> I'm sure this is a group policy thing, but I can't find it. Thanks!

 

[Newell White]

Re: How do you prevent workstations in a server 2003 domain from l

Steven is absolutely right.

Anyone who leaves themselves logged in to an unattended workstation has no
defence if someone else uses that workstation to violate the organisation's
Legitimate Use rules.

It is hard to explain pornography in My Documents when your IT department
provides you with a unique user name and secure password. You can lose not
just your job but your whole career from such cases.
--
Newell White


"Steven L Umbach" wrote:

> Robert told you how to make the changes to disable it but you may want to
> reconsider in that it is a good security practice to have a computer lock
> after a certain period of inactivity and even required in some environments
> such as those that need to comply with HIPPA regulations.
>
> Instead you may want to review the idle period that manages when the
> computer locks and change that to a more tolerable time if it is too short
> for your environment and you are willing to take the risk of such. You may
> also want to modify the user configuration [screen saver lock] Group Policy
> so that it applies or does not apply to certain domain users as the case may
> be via what users are within the scope of management of the Group Policy
> that applies the setting..
>
> Steve
>
>
> "Just Guessing" <JustGuessing@discussions.microsoft.com> wrote in message
> news:1923430C-9D38-4C5C-82B4-E37C754CEE30@microsoft.com...
> > On a Windows server 2003 domain, how do you prevent workstations from
> > entering a "locked" state. The user must hit CTRL-ALT-DEL and log back in
> > after a certain time period. The user will get a window indicating "this
> > workstation has been locked . . . "
> >
> > I'm sure this is a group policy thing, but I can't find it. Thanks!
>
>
>

 

[Roberto Di'Lello]

Re: How do you prevent workstations in a server 2003 domain from l

Yes, sorry for not said that, but its a good practice to keep it on.

robert.

--
--
Roberto Di'Lello | MCSE 2003 - MCSA Messaging 2003 - MCTS |
roberto.dilello@radians.com.ar | www.radians.com.ar


"Newell White" <NewellWhite@discussions.microsoft.com> escribió en el
mensaje de noticias:0199E9FE-1C91-4A3A-BEEF-99D3D5BDD381@microsoft.com...
> Steven is absolutely right.
>
> Anyone who leaves themselves logged in to an unattended workstation has no
> defence if someone else uses that workstation to violate the
> organisation's
> Legitimate Use rules.
>
> It is hard to explain pornography in My Documents when your IT department
> provides you with a unique user name and secure password. You can lose not
> just your job but your whole career from such cases.
> --
> Newell White
>
>
> "Steven L Umbach" wrote:
>
>> Robert told you how to make the changes to disable it but you may want to
>> reconsider in that it is a good security practice to have a computer lock
>> after a certain period of inactivity and even required in some
>> environments
>> such as those that need to comply with HIPPA regulations.
>>
>> Instead you may want to review the idle period that manages when the
>> computer locks and change that to a more tolerable time if it is too
>> short
>> for your environment and you are willing to take the risk of such. You
>> may
>> also want to modify the user configuration [screen saver lock] Group
>> Policy
>> so that it applies or does not apply to certain domain users as the case
>> may
>> be via what users are within the scope of management of the Group Policy
>> that applies the setting..
>>
>> Steve
>>
>>
>> "Just Guessing" <JustGuessing@discussions.microsoft.com> wrote in message
>> news:1923430C-9D38-4C5C-82B4-E37C754CEE30@microsoft.com...
>> > On a Windows server 2003 domain, how do you prevent workstations from
>> > entering a "locked" state. The user must hit CTRL-ALT-DEL and log back
>> > in
>> > after a certain time period. The user will get a window indicating
>> > "this
>> > workstation has been locked . . . "
>> >
>> > I'm sure this is a group policy thing, but I can't find it. Thanks!
>>
>>
>>

 

[Steven L Umbach]

Robert told you how to make the changes to disable it but you may want to
reconsider in that it is a good security practice to have a computer lock
after a certain period of inactivity and even required in some environments
such as those that need to comply with HIPPA regulations.

Instead you may want to review the idle period that manages when the
computer locks and change that to a more tolerable time if it is too short
for your environment and you are willing to take the risk of such. You may
also want to modify the user configuration [screen saver lock] Group Policy
so that it applies or does not apply to certain domain users as the case may
be via what users are within the scope of management of the Group Policy
that applies the setting..

Steve


"Just Guessing" <JustGuessing@discussions.microsoft.com> wrote in message
news:1923430C-9D38-4C5C-82B4-E37C754CEE30@microsoft.com...
> On a Windows server 2003 domain, how do you prevent workstations from
> entering a "locked" state. The user must hit CTRL-ALT-DEL and log back in
> after a certain time period. The user will get a window indicating "this
> workstation has been locked . . . "
>
> I'm sure this is a group policy thing, but I can't find it. Thanks!