XP Pro - New User - Screen Saver Security

[woolfie]

We're running XP Pro on our network. I would like to create a desktop configuration that would force the "on resume, password protection" in the screen saver to be checked when a new user account is created on that workstation.

Any user can logon to any computer and their configuration is copied from the default user configuration. If I change the registry entries under HKEY_USERS\.DEFAULT\DESKTOP it doesn't change the default for the new user accounts.

Anyone got any ideas?

Thanks,

Jeff

 

[linney]

HOW TO: Create a Custom Default User Profile (Q305709)

http://support.microsoft.com/support/kb/articles/q305/7/09.asp

Q310516 HOW TO: Distribute Registry Changes to Computers in Windows XP

http://support.microsoft.com/support/kb/articles/q310/5/16.asp

Q310514 HOW TO: Distribute a Custom Desktop Theme to Users in Windows XP

http://support.microsoft.com/support/kb/articles/q310/5/14.asp

Screen Saver Is Not Password Protected If Started Manually

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q228160

screen saver
thread779-567498

"ScreenSaveActive" appears in these locations when the Group Policy is not configured. The last two keys may vary depending on users etc.

HKEY_CURRENT_USER\Control Panel\Desktop

HKEY_USERS\.DEFAULT\Control Panel\Desktop

HKEY_USERS\S-1-5-18\Control Panel\Desktop

HKEY_USERS\S-1-5-21-507921405-839522115-725345543-1008\Control Panel\Desktop




If you enable it in Group Policy "ScreenSaveActive" appears in these keys. Again the last 3 keys may be slightly different depending on users.

HKEY_CURRENT_USER\Control Panel\Desktop

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop

HKEY_USERS\.DEFAULT\Control Panel\Desktop

HKEY_USERS\S-1-5-18\Control Panel\Desktop

HKEY_USERS\S-1-5-21-507921405-839522115-725345543-1008\Control Panel\Desktop

HKEY_USERS\S-1-5-21-507921405-839522115-725345543-1008\Software\Policies\Microsoft\Windows\Control Panel\Desktop

In all cases the valuedata is 1 for active or 0 for disabled (Reg_SZ)