Hi All,
A situation that I cannot resolve. I have made a GPO "users" with some settings regarding the lockscreen :
User Configuration (Enabled) - Policies -Administrative Templates - Control Panel/Personalization
If you enable this setting, the system displays the specified screen saver on the user's desktop. Also, this setting disables the drop-down list of screen savers in the Screen Saver dialog in the Personalization or Display Control Panel, which prevents
users from changing the screen saver.
If you disable this setting or do not configure it, users can select any screen saver.
If you enable this setting, type the name of the file that contains the screen saver, including the .scr file name extension. If the screen saver file is not in the %Systemroot%\System32 directory, type the fully qualified path to the file.
If the specified screen saver is not installed on a computer to which this setting applies, the setting is ignored.
Note: This setting can be superseded by the "Enable Screen Saver" setting. If the "Enable Screen Saver" setting is disabled, this setting is ignored, and screen savers do not run." gpmc_settingname="Force specific screen saver"
gpmc_settingpath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_supported="At least Windows 2000 Service Pack 1" tabindex="0">Force specific screen saver --> Enabled
If you enable this setting, users cannot change or save a theme. Elements of a theme such as the desktop background, color, sounds, and screen saver can still be changed (unless policies are set to turn them off).
If you disable or do not configure this setting, there is no effect.
Note: If you enable this setting but do not specify a theme using the "load a specific theme" setting, the theme defaults to whatever the user previously set or the system default." gpmc_settingname="Prevent changing theme" gpmc_settingpath="User
Configuration/Administrative Templates/Control Panel/Personalization" gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional" tabindex="0">Prevent changing theme --> Enabled<span gpmc_settingdescription="Determines
whether screen savers used on the computer are password protected.
If you enable this setting, all screen savers are password protected. If you disable this setting, password protection cannot be set on any screen saver.
This setting also disables the "Password protected" checkbox on the Screen Saver dialog in the Personalization or Display Control Panel, preventing users from changing the password protection setting.
If you do not configure this setting, users can choose whether or not to set password protection on each screen saver.
To ensure that a computer will be password protected, enable the "Enable Screen Saver" setting and specify a timeout via the "Screen Saver timeout" setting.
Note: To remove the Screen Saver dialog, use the "Prevent changing Screen Saver" setting." gpmc_settingname="Password protect the screen saver" gpmc_settingpath="User Configuration/Administrative Templates/Control Panel/Personalization"
gpmc_supported="At least Windows 2000 Service Pack 1" tabindex="0">
I have applied it to an OU containing my users, that's ok everything is applied. Now the problem... I run a Citrix XenApp environnement to publish for example Office 2007, my problem is that when it locks, the user has to unlock 2 sessions (1x local computer and after 1x the Citrix Session).
How can I do to not apply this GPO only for the Citrix Server? I haven't found anything to choose to not apply this GPO on a specific computer / server.
Thanks and sincerely.
Joël