OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Summary of Template Info
From: Gene Gomez (ggomezVERANCE.COM)
Date: Mon May 15 2000 - 14:37:04 CDT

Steve,
I'm not sure if you're using Windows NT 4.0 or Windows 2000, but it's fairly
simple to do in Windows 2000. Establish a Group Policy snap-in for your
domain in MMC and go into Console Root->Default Domain Policy->User
Configuration->Administrative Templates->Control Panel->Display and set
"Password protect the screen saver" to "Enabled".
Hopefully this helps a bit.

-Gene

-----Original Message-----
From: Focus on Microsoft Mailing List
[mailto:FOCUS-MSSECURITYFOCUS.COM]On Behalf Of Weller, Steve
Sent: Friday, May 12, 2000 1:53 PM
To: FOCUS-MSSECURITYFOCUS.COM
Subject: Summary of Template Info

Hello,

I have received some excellent ideas! The Scrsav.adm file I received from
Andrej (thanks again) is included below. It has a few extra settings
outside of the scope I am looking for, but is very customizable.

I am now searching for a value I can add to the Registry to disable the
right to uncheck the password protected box between logins! (Yes I have
determined users...) Seems like the closest I can get is to completely
remove the SS tab from Display Properties. In my opinion, that is a little
too restrictive.

If anyone knows the Reg value to gray out only that particular option -
please pass it along.

Thanks again for everyone's suggestions!

Steve
________________________________

Scrsav.adm > Courtesy of Andrej Jursa
________________________________
 CLASS USER

      CATEGORY !!Screen_Saver_Policy
              POLICY !!Screen_Saver
              KEYNAME "Control Panel\Desktop"
                      PART !!Screen_Saver_Location EDITTEXT
                      DEFAULT !!DEF_SCREEN_SAVER
                      VALUENAME SCRNSAVE.EXE
                      END PART
              END POLICY

              POLICY !!ENABLE_SCREEN_SAVER
              KEYNAME "Control Panel\Desktop"
                      VALUENAME ScreenSaveActive
                      VALUEON "1" VALUEOFF "0"
              END POLICY

              POLICY !!ENABLE_Password
              KEYNAME "Control Panel\Desktop"
                      VALUENAME ScreenSaverIsSecure
                      VALUEON "1" VALUEOFF "0"
              END POLICY

              POLICY !!Screen_Saver_Time_Out
              KEYNAME "Control Panel\Desktop"
                      PART !!Screen_Saver_Time_Out_Hint EDITTEXT
                      DEFAULT 300
                      VALUENAME ScreenSaveTimeOut
                      END PART
              END POLICY

              POLICY !!Screen_Saver_Marquee_Text
              KEYNAME "Control Panel\Screen Saver.Marquee"
                      PART !!Screen_Saver_Marquee_Text_Hint EDITTEXT
                      DEFAULT "NAY"
                      VALUENAME Text
                      END PART
              END POLICY

              POLICY !!Screen_Saver_Marquee_Font
              KEYNAME "Control Panel\Screen Saver.Marquee"
                      PART !!Screen_Saver_Marquee_Font_Hint EDITTEXT
                      DEFAULT "Times New Roman"
                      VALUENAME Font
                      END PART
              END POLICY

              POLICY !!Screen_Saver_Marquee_FontSize
              KEYNAME "Control Panel\Screen Saver.Marquee"
                      PART !!Screen_Saver_Marquee_FontSize_Hint EDITTEXT
                      DEFAULT 72
                      VALUENAME Size
                      END PART
              END POLICY

              POLICY !!Screen_Saver_Marquee_Speed
              KEYNAME "Control Panel\Screen Saver.Marquee"
                      PART !!Screen_Saver_Marquee_Speed_Hint EDITTEXT
                      DEFAULT 1
                      VALUENAME Speed
                      END PART
              END POLICY

              POLICY !!Screen_Saver_Marquee_Text_Color
              KEYNAME "Control Panel\Screen Saver.Marquee"
                      PART !!Screen_Saver_Marquee_Text_Color_Hint EDITTEXT
                      DEFAULT "0 0 255"
                      VALUENAME TextColor
                      END PART
              END POLICY

              POLICY !!Screen_Saver_Marquee_Background_Color
              KEYNAME "Control Panel\Screen Saver.Marquee"
                      PART !!Screen_Saver_Marquee_Background_Color_Hint
EDITTEXT
                      DEFAULT "0 0 0"
                      VALUENAME BackgroundColor
                      END PART
              END POLICY
      END CATEGORY

      [strings]
      Screen_Saver_Policy="Screen Saver Policies"
      Screen_Saver="Screen Saver"

      Screen_Saver_Time_Out="Screen Saver Timeout"
      Screen_Saver_Time_Out_Hint="Enter the Screen Saver Timeout (in Secs)
(e.g. 240 = 4 min.)"

      Screen_Saver_Marquee_Text="Marquee Screen Saver Text"
      Screen_Saver_Marquee_Text_Hint="Enter the Marquee Screen Saver Text
(e.g. Saving Screen)"

      Screen_Saver_Marquee_Font="Marquee Screen Saver Font"
      Screen_Saver_Marquee_Font_Hint="Enter the Marquee Screen Saver Font
(e.g. Arial)"

      Screen_Saver_Marquee_FontSize="Marquee Screen Saver Font Size"
      Screen_Saver_Marquee_FontSize_Hint="Enter the Marquee Screen Saver
Font Size (e.g. 10, 12, 24, ...)"

      Screen_Saver_Marquee_Speed="Marquee Screen Saver Speed"
      Screen_Saver_Marquee_Speed_Hint="Enter the Marquee Screen Saver Speed
(1-slowest; 30-fastest) (e.g. 5)"

      Screen_Saver_Marquee_Text_Color="Marquee Screen Saver Text Color"
      Screen_Saver_Marquee_Text_Color_Hint="Enter the Marquee Screen Saver
Text Color (R G B)"

      Screen_Saver_Marquee_Background_Color="Marquee Screen Saver Background
Color"
      Screen_Saver_Marquee_Background_Color_Hint="Enter the Marquee Screen
Saver Background Color (R G B)"

      ENABLE_SCREEN_SAVER="Enable Screen Saver"
      Screen_Saver_Location="Enter the location of the Screen Saver"
      DEF_Screen_Saver="%SYSTEMROOT%\system32\ssmarque.scr"
      ENABLE_Password=Enable Password