Greater than or equal check when using Group Policy Preferences and Item Level Targeting in the Registry

Question

I'm implementing some screen saver configurations via Group Policy Preferences (on Win7 Enterprise x64 desktops). The desired configuration is to have users be able to adjust their screen saver and screen saver time out, but not allow them to select non screen saver or a time out higher than 45min.

I've found a great write-up for configuration of the screen saver (link) but cannot find a way to configure the time out. I cannot find a way to have the item level targeting compare the reg key HKCU\Control Panel\Desktop\ScreenSaveTimeOut value and force an over-write of the key if configured above 45min/2700seconds.

Anyone else tried something like this or found a means to do this?

Answer 1

The simplest thing would be to write a script to accomplish this and have it run on the workstations every so often.

On another note, I would just enforce a reasonable timeout and just teach users to lock their workstations when they step away. (What is reasonable depends on the environment and how long users are sitting at their desks but not actually using the workstation, but 45 minutes seems way too long)