I want to force a desktop lockscreen (password protected) when idle for 2 minutes. After doing some research i found the following registry keys, which (strangely) don't result to expected behaviour:
HKCU:\Control Panel\Desktop\ScreenSaveActive (REG_SZ)
HKCU:\Control Panel\Desktop\ScreenSaverIsSecure (REG_SZ)
HKCU:\Control Panel\Desktop\ScreenSaveTimeOut (REG_SZ)
Any idea's i'f im missing out something?
TLDR: What reg keys need to be modified for secure lock (no lockout!) when idle (Windows)?
P.S: PC is non-domain joined.
Best Answer
You should set this through local computer policy.
Run
mmc.exe
(requires local administrator) thenFile > Add/Remove Snap-in...
(keyboard shortcutctrl + m
)Scroll down and add
Group Policy Object Editor
a dialogue window will appear, the default Group Policy Object should be Local Computer which will edit local computer policy. If it is not then change to Local Computer. Click Finish.Drill down to
Local Computer Policy > User Configuration > Administrative Templates > Personalization
Set the
Screen saver timeout
policy to 120 seconds. Next set thePassword protect the screen saver
policy to enabled.You have some other options, such as enforcing specific screen savers, if you want.
You don't need to save, changes are set automatically as you make them, though you may need to reboot the computer for the changes to become active.