'Enable Screen saver'
|ID: oval:org.secpod.oval:def:22831||Date: (C)2015-01-07 (M)2017-09-27|
|Class: COMPLIANCE||Family: windows|
Enables desktop screen savers.
If you disable this setting, screen savers do not run. Also, this setting disables the Screen Saver section of the Screen Saver dialog in the Personalization or Display Control Panel. As a result, users cannot change the screen saver options.
If you do not configure it, this setting has no effect on the system.
If you enable it, a screen saver runs, provided the following two conditions hold: First, a valid screen saver on the client is specified through the "Screen Saver executable name" setting or through Control Panel on the client computer. Second, the screen saver timeout is set to a nonzero value through the setting or Control Panel.
Also, see the "Prevent changing Screen Saver" setting.
Configure this policy setting to Enabled so that when the other screen saver settings are implemented the risk of a user's desktop session being hijacked by a passerby is reduced.
The screen saver will automatically activate when the computer has been unattended for the amount of time specified by the Screen Saver timeout setting. The impact should be minimal since the screen saver is enabled by default.
(1) GPO: User Configuration\Administrative Templates\Control Panel\Personalization\Enable screen saver
(2) REG: HKEY_USERS\Software\Policies\Microsoft\Windows\Control Panel\Desktop\ScreenSaveActive
(3) WMI: ###
|Microsoft Windows Server 2012 R2|