How do you prevent workstations in a server 2003 domain from locki

How do you prevent workstations in a server 2003 domain from locki
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
How do you prevent workstations in a server 2003 domain from locki Just Guessing 10-22-2007
Posted by =?Utf-8?B?SnVzdCBHdWVzc2luZw== on October 22, 2007, 11:01 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On a Windows server 2003 domain, how do you prevent workstations from
entering a "locked" state. The user must hit CTRL-ALT-DEL and log back in
after a certain time period. The user will get a window indicating "this
workstation has been locked . . . "

I'm sure this is a group policy thing, but I can't find it. Thanks!

Posted by Roberto Di'Lello on October 22, 2007, 2:42 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
You could modify this: GP, User Configuration, Windows Settings,
Administrative Templates, System, Power Management, Prompt for password on
resume from hibernate /suspend. And the other value that you could modify
is: Administrative templates\control panel\display\password protect the
screen saver and screen saver timeout.

Regards.

--
--
Roberto Di'Lello | MCSE 2003 - MCSA Messaging 2003 - MCTS |
roberto.dilello@radians.com.ar | www.radians.com.ar


mensaje de noticias:1923430C-9D38-4C5C-82B4-E37C754CEE30@microsoft.com...
> On a Windows server 2003 domain, how do you prevent workstations from
> entering a "locked" state. The user must hit CTRL-ALT-DEL and log back in
> after a certain time period. The user will get a window indicating "this
> workstation has been locked . . . "
>
> I'm sure this is a group policy thing, but I can't find it. Thanks!


Posted by Steven L Umbach on October 22, 2007, 10:47 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Robert told you how to make the changes to disable it but you may want to
reconsider in that it is a good security practice to have a computer lock
after a certain period of inactivity and even required in some environments
such as those that need to comply with HIPPA regulations.

Instead you may want to review the idle period that manages when the
computer locks and change that to a more tolerable time if it is too short
for your environment and you are willing to take the risk of such. You may
also want to modify the user configuration [screen saver lock] Group Policy
so that it applies or does not apply to certain domain users as the case may
be via what users are within the scope of management of the Group Policy
that applies the setting..

Steve


> On a Windows server 2003 domain, how do you prevent workstations from
> entering a "locked" state. The user must hit CTRL-ALT-DEL and log back in
> after a certain time period. The user will get a window indicating "this
> workstation has been locked . . . "
>
> I'm sure this is a group policy thing, but I can't find it. Thanks!



Posted by =?Utf-8?B?TmV3ZWxsIFdoaXRl?= on October 23, 2007, 4:07 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Steven is absolutely right.

Anyone who leaves themselves logged in to an unattended workstation has no
defence if someone else uses that workstation to violate the organisation's
Legitimate Use rules.

It is hard to explain pornography in My Documents when your IT department
provides you with a unique user name and secure password. You can lose not
just your job but your whole career from such cases.
--
Newell White


"Steven L Umbach" wrote:

> Robert told you how to make the changes to disable it but you may want to
> reconsider in that it is a good security practice to have a computer lock
> after a certain period of inactivity and even required in some environments
> such as those that need to comply with HIPPA regulations.
>
> Instead you may want to review the idle period that manages when the
> computer locks and change that to a more tolerable time if it is too short
> for your environment and you are willing to take the risk of such. You may
> also want to modify the user configuration [screen saver lock] Group Policy
> so that it applies or does not apply to certain domain users as the case may
> be via what users are within the scope of management of the Group Policy
> that applies the setting..
>
> Steve
>
>
> > On a Windows server 2003 domain, how do you prevent workstations from
> > entering a "locked" state. The user must hit CTRL-ALT-DEL and log back in
> > after a certain time period. The user will get a window indicating "this
> > workstation has been locked . . . "
> >
> > I'm sure this is a group policy thing, but I can't find it. Thanks!
>
>
>

Posted by Roberto Di'Lello on October 23, 2007, 8:20 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Yes, sorry for not said that, but its a good practice to keep it on.

robert.

--
--
Roberto Di'Lello | MCSE 2003 - MCSA Messaging 2003 - MCTS |
roberto.dilello@radians.com.ar | www.radians.com.ar


mensaje de noticias:0199E9FE-1C91-4A3A-BEEF-99D3D5BDD381@microsoft.com...
> Steven is absolutely right.
>
> Anyone who leaves themselves logged in to an unattended workstation has no
> defence if someone else uses that workstation to violate the
> organisation's
> Legitimate Use rules.
>
> It is hard to explain pornography in My Documents when your IT department
> provides you with a unique user name and secure password. You can lose not
> just your job but your whole career from such cases.
> --
> Newell White
>
>
> "Steven L Umbach" wrote:
>
>> Robert told you how to make the changes to disable it but you may want to
>> reconsider in that it is a good security practice to have a computer lock
>> after a certain period of inactivity and even required in some
>> environments
>> such as those that need to comply with HIPPA regulations.
>>
>> Instead you may want to review the idle period that manages when the
>> computer locks and change that to a more tolerable time if it is too
>> short
>> for your environment and you are willing to take the risk of such. You
>> may
>> also want to modify the user configuration [screen saver lock] Group
>> Policy
>> so that it applies or does not apply to certain domain users as the case
>> may
>> be via what users are within the scope of management of the Group Policy
>> that applies the setting..
>>
>> Steve
>>
>>
>> > On a Windows server 2003 domain, how do you prevent workstations from
>> > entering a "locked" state. The user must hit CTRL-ALT-DEL and log back
>> > in
>> > after a certain time period. The user will get a window indicating
>> > "this
>> > workstation has been locked . . . "
>> >
>> > I'm sure this is a group policy thing, but I can't find it. Thanks!
>>
>>
>>

Similar ThreadsPosted
using ICF on 2003 server in domain? September 14, 2005, 2:50 am
Re: why switch from NT 4 domain to Server 2003 AD? June 25, 2005, 2:03 am
Re: why switch from NT 4 domain to Server 2003 AD? June 24, 2005, 6:35 pm
Re: why switch from NT 4 domain to Server 2003 AD? June 25, 2005, 2:03 am
NT4 workstation in 2003 server domain July 12, 2005, 1:43 pm
Prevent access to domain if Anti-Virus not installed November 28, 2005, 4:07 pm
Security settings on the Terminal Server prevent automatic logon September 12, 2005, 3:18 am
Server that came from a W2000 Domain and has joined a NT Domain March 22, 2006, 2:10 pm
Can not use UNC path in Windows server 2003 server 64 bit OS September 30, 2005, 4:19 pm
AD CS in 2003 AD domain March 19, 2008, 5:15 am

The site map in XML format XML site map

Contact Us | Privacy Policy