Hi, I'm trying to prevent users in our Domain from changing the Screensavers on our WIndows 10 workstations. I set a group policy called 'Restrict Screen Saver' Rooted at the domain level as well as Security Filtered to the User that I would like it to effect. The GPO was setup as the following in the GPMC portion of AD.
User Configuration > Administrative Templates > Control Panel > Personalization. Prevent changing screensaver - Enabled.
For testing reasons there is only one user in the GPO scope Security Filtering.The policy is enabled and enforced and the link is enabled. Delegation shows that the Policy is enabled for the user in the Security Filtering scope. At this point the scope
only consists of one test user. I guess what I need to know is how to properly setup the scope of this policy to get it to work. I only want this to effect certain users so I have to ask.
1. Is this Policy supposed to be set at the domain level or can I apply it to lower OU's?
2. Is the Security filtering portion under the Scope supposed to have users or machines?
3. If I only want certain users to be effected by this policy should Authenticated users be part of the securtity filtering?
4. Is the policy path correct to prevent users from changing the screensaver?
Support analyst