In Server 2012 Group Policy how can I force all users to have password-locked screen savers

windows-server-2012

This is how I have it configured:

This is how I have it configured. Some users have their screen savers password protected, other's don't. I made the change a week ago, plenty of time for the policy to propagate. Is it possible some of the users in the domain aren't configured to get policy updates?

While only some users have the password lock, all users are currently not able to edit their screen saver.

This is the first time I've ever done anything with group policy. The Domain Controller is Server 2012. The machines are Windows 7.

Edit: looks like it may be a bug in Server 2012: http://support2.microsoft.com/kb/2976965#appliesto, investigating…

Best Answer

Your screenshot isn't showing that you've linked that GPO anywhere.

Without linking the GPO to an OU it won't actually apply to computers or users.

I think some background on Group Policy would probably help you out a lot.

Edit:

Running the Resultant Set of Policy (RSoP) tool on a user where you hypothesize that your GPO settings are "taking" will show you if they really are. If the GPO isn't linked anywhere then you won't see it in an RSoP output.

In the case of this setting, which is a user setting, you'll want to link it at or above the OU where your user accounts are located. You could link this particular GPO to the top of the domain with no ill effects.