terminal servers / lock down settings

[Fred Martin_1]

We've got two Win2003 Std servers, running as terminal servers. Several applications are installed, being published by TSE (ProPalms, formerly Tarantella).

We've discovered that the user's screen saver on the server will mask an application that he might have open, if he leaves it idle.

Each user has their own screen saver setting. I'm not terribly familiar with Win2003 server, and so need some information on how to set (and lock down) a setting on the server that would apply to all users.

I assume there must be some kind of policy setup, but not sure where to begin.

[Igor Karasik]

Fred,
Screen saver GPO located in
User Configuration -> Administrative templates -> Control Panel -> Display
There are 'Screen saver', 'Screen saver executable name' and 'Screen saver timeout' settings.

Note that screen saver settings in GPO are Per User - i.e you need to set this GPO per Users OU. If you want to apply these settings only when user log on to TS you probably need to use "loopback processing" option in the GPO.
See these links for more information
"How to Apply Group Policy Objects to Terminal Services Servers"
http://support.microsoft.com/?kbid=260370
"Loopback Processing of Group Policy"
http://support.microsoft.com/?kbid=231287

[Fred Martin_1]

Igor,

I found that. My two term servers are members of an NT domain. They are not domain controllers. I'll be changing to Active Directory in several months.

For now, if I change the GPO here, am I affecting all domain servers? I really only want to affect these two servers.

Fred

[Igor Karasik]

Fread,
GPO screen saver settings are Per User, so you must define it in Users OU.
But I afraid you cannot do nothing if you don't have AD...
Maybe somebody else will have suggestions.