GPO - Question on lock timeout for W10 machines

---

Hi,

Not strictly a course question but does anybody know if I can set the screen lock timeout on Windows 10 by user?

We have factory PC's that display operational information or run applications that book in/out stock movements. These PC's auto login (eg: monitoruser) and auto launch applications. Sometimes managers will logout and login to one of these machines with their own AD accounts.

I need the PC screens NOT lock when logged in as the auto logged in user but if a manager logs in then I need it to lock as managers have more access to company files/folders than the monitoruser does.

I have found options to disable the screen lock in GPO but these are in the "Computer Configuration", but if I'm applying different settings at the user level they need to be in "User Configuration"

If I set the GPO not to lock in the Computer Configuration, can I override this at the user configuration level?

Hope this makes sense. Any pointers would be appreciated.

Thanks

@Mark-Sammon ,

If I am understanding correctly, you need the screen to lock when a manager logs in and then walks away from the computer.

You should be able to use the screen saver settings under

User Configuration > Administrative Templates > Control Panel > Personalization

The settings to look at would be

1. Enable screen saver
2. Password protect the screen saver
3. Screen saver timeout

User settings are applied after computer settings, so they should take precedence.

I'm not sure how your AD is arranged (where the manager accounts and monitoruser account is located). If they are in the same OU, you can use security filtering to prevent these user settings from applying to the monitoruser account.

Let me know if this works or if I didn't understand your scenario and we can come up with another solution.