Screen saver timeout If the Screen Saver Timeout setting is enabled, then the screen saver will be launched when the specified amount of time has passed since the last user action. Valid values range from 1 to 89,400 seconds (24 hours). The setting has no effect if the wait time is set to zero or no screen saver has been specified. Counter Measure: Configure this policy setting to 900 seconds (15 minutes) so that when the other screen saver settings are implemented the risk of a user's desktop session being hijacked by a passerby is reduced. Potential Impact: The screen saver will automatically activate when the computer has been unattended for the amount of time specified. The impact should be minimal since the screen saver is enabled by default.

[Max_value_in_seconds]

(1) GPO: User ConfigurationAdministrative TemplatesControl PanelPersonalizationScreen saver timeout (2) REG: HKEY_USERSSoftwarePoliciesMicrosoftWindowsControl PanelDesktopScreenSaveTimeOut (3) WMI: ###