I have windows server 2008 with service pack two, on the network I have xp computers. The information on the network is very sensitive. With Server 2008 I am unable to get the screen to be password protected using a gpo. It seems that XP is not talking very well with server 2008. Is there a way, besides going in as every single user and setting the password protect option, to do this?

On 7/19/2010 10:39 AM, jolleyITadmin wrote: > get the screen to be password protected using a gpo Could you explain more about the screen that you are trying to protect? You should be able to require automatic lock of the screen when the screensaver starts by using a GPO and modifying the settings in User Configuration\Administrative Templates\Control Panel\Display or User Configuration\Administrative Templates\Control Panel\Personalization and setting "Password protect the screen saver" -- Mike Burr

Yes, I am trying to get the screen saver to be password protected. I have enabled User configuration>Administrative Templates>Control Panel>Display Password protect the screen Saver However, This does not implement on the XP computers. Am I missing some part of it?

What are the results on an XP system when you perform a gpupdate /force from the command prompt and perform a resultant set of policy start -> run -> mmc file -> add/remove snap-in -> add -> Resultant Set of Policy Does the policy appear to be applied to the XP systems? If not, is the GPO that you are using linked with a WMI query or are the "apply group policy" permissions restricted in any way? Also, is the GPO applied to the correct OUs/domains/sites? -- Mike Burr

I also have a vista pc on the network, I compared the RSoP for the two systems with the same user. It is still not showing the GPO's on the XP computer, but is showing them all on the vista computer. I read that older xp computers require the installation of Group Policy Client Side Extensions in order for the permissions to work. Would that be my problem? Also, I am running a 32 bit version of XP.

That's very possible, but when I looked at the policy on my system, it says that it is supported back to Windows 2000. Are the vista and XP systems in the same OU? Remembering the application of group policy, it is possible for group policy at the OU level or a loopback enabled policy to override the setting. http://technet.microsoft.com/en-us/library/cc736313%28WS.10%29.aspx-- Mike Burr

You were right. I believe my problem was that I had not applied the GPO to the Primary group the user was part of. Would that cause the problem. I got the screen saver password protect to work, I just want to double check that I know the correct reason why I was able to make it work.

That sounds like a good potential cause to why it wasn't working, if it is not applied to the correct groups/OUs then the policy will not apply. -- Mike Burr

Hi jolleyITadmin , Thanks for posting here. Have you also checked event log when user login system? Here is some great troubleshooting steps for you reference: Troubleshooting Group Policy Using Event Logs http://technet.microsoft.com/en-us/library/cc749336(WS.10).aspx Troubleshooting Group Policy Problems http://technet.microsoft.com/en-us/library/cc787386(WS.10).aspx Thanks. Tiger LiPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.