Our DC is Windows server 2008 R2 and our workstations in our company are Windows 7. I am trying to set up a GPO that will automatically lock workstations after a predetermined time(no screensaver-just lock them). I have found all sorts of info on the web and on this site on how to do it-and it seems pretty simple. However when I create the GPO and apply it and test, it is not working. Here is what I have done:
I make the changes to the default domain policy at:
User Configuration > Policies > Administrative Templates > Control Panel > Personalization
in the GPO I have enabled the screensaver
in the GPO I have enabled the timeout(set it to 60 seconds)
in the GPO I have enabled the Force Specific Screensaver and set screensaver to:
(also tested this on the command line and it does lock the workstation)
in the GPO I have enabled Password Protect The Screensaver.
I went to a workstation and did a
gpupdate /force to refresh the policy and waited the 60 seconds---no dice. Screen did not lock. Same thing after rebooting the computer and after refreshing policy(and rebooting) on a different computer. The GPO is made at the default domain policy level so I know that there should not be any permissions issues or policy override problems. Every computer gets this default domain policy.
Any help solving this issue would be appreciated. I have sorted through the questions on Serverfault and the solutions, but they did not seem to help me. I don't know why this is not working. It seems like it should be.