Announcement

Collapse
No announcement yet.

disable screensaver tab for power users

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • disable screensaver tab for power users

    Hello everyone,

    I would just like to ask if it's possible to modify a GPO setting so that the screensaver tab is only available to the Administrators users group.

    Thanks for your help and any advice you wish to provide is greatly appreciated.

  • #2
    Re: disable screensaver tab for power users

    I have blocked inheritance on the admins OU.....

    Comment


    • #3
      Re: disable screensaver tab for power users

      Or (in case you don't have your Admins in a OU of their own), you can create a Group that contain all the other users and use Security Filtering of the GPO, so it will be applied only on that Group.

      Sorin Solomon


      In order to succeed, your desire for success should be greater than your fear of failure.
      -

      Comment


      • #4
        Re: disable screensaver tab for power users

        Thank you both for your good advice

        Blocked inheritance is the more crafty way of doing this it seems Both methods offer the desired result though, so it's down to what suits you the most.

        Many thanks and I'll be referring to your forums more frequently for any other queries that may arise in the future.

        Comment


        • #5
          Re: disable screensaver tab for power users

          Just to take the matter a little further, if the computer isn't on a domain would it possible for an administrator to achieve this using an OU or a GPO setting ?

          If not, then what method should be used for a computer that isn't on a domain ?

          Thanks again for any thoughts and comments you wish to provide.

          Comment


          • #6
            Re: disable screensaver tab for power users

            Originally posted by nonstop301 View Post
            Just to take the matter a little further, if the computer isn't on a domain would it possible for an administrator to achieve this using an OU or a GPOs setting ?
            If it's not in a domain then OUs and GPO don't factor into the equation.

            You can use the Local Group Policy to apply settings but there's no reccomended method for filtering it. It will apply to every user that logs on. There is however a workaround. You can essentailly have two groups of users; ones that apply the policy and ones that don't.
            Here's how:
            • Make a group for everyone you don't want the policy to apply to
            • Add the appropriate users
            • Edit the Local Group Policy (gpedit.msc) to your heart's content
            • Browse to %systemroot%\System32\GroupPolicy\user
            • Change the permissions on registry.pol to deny read for the group you created


            Now to edit the Local Group Policy you need to have the read permission so each time you need to change the policy you'll need to change the permissions back and forth.

            It's not pretty and could get confusing especially if you're not the only administrator.
            Last edited by JeremyW; 20th July 2007, 02:50.
            Regards,
            Jeremy

            Network Consultant/Engineer
            Baltimore - Washington area and beyond
            www.gma-cpa.com

            Comment

            Working...
            X