Windows idle lockout by registry edit

windowswindows-registry

I want to force a desktop lockscreen (password protected) when idle for 2 minutes. After doing some research i found the following registry keys, which (strangely) don't result to expected behaviour:

HKCU:\Control Panel\Desktop\ScreenSaveActive (REG_SZ)

HKCU:\Control Panel\Desktop\ScreenSaverIsSecure (REG_SZ)

HKCU:\Control Panel\Desktop\ScreenSaveTimeOut (REG_SZ)

Any idea's i'f im missing out something?

TLDR: What reg keys need to be modified for secure lock (no lockout!) when idle (Windows)?

P.S: PC is non-domain joined.

Best Answer

You should set this through local computer policy.

Run mmc.exe (requires local administrator) then File > Add/Remove Snap-in... (keyboard shortcut ctrl + m)

Scroll down and add Group Policy Object Editor a dialogue window will appear, the default Group Policy Object should be Local Computer which will edit local computer policy. If it is not then change to Local Computer. Click Finish.

Drill down to Local Computer Policy > User Configuration > Administrative Templates > Personalization

Set the Screen saver timeout policy to 120 seconds. Next set the Password protect the screen saver policy to enabled.

You have some other options, such as enforcing specific screen savers, if you want.

You don't need to save, changes are set automatically as you make them, though you may need to reboot the computer for the changes to become active.

Related Question