If you enable this setting, the system displays the specified screen saver on the user's desktop. Also, this setting disables the drop-down list of screen savers in the Screen Saver dialog in the Personalization or Display Control Panel, which prevents users from changing the screen saver. If you disable this setting or do not configure it, users can select any screen saver. If you enable this setting, type the name of the file that contains the screen saver, including the .scr file name extension. If the screen saver file is not in the %Systemroot%\System32 directory, type the fully qualified path to the file. If the specified screen saver is not installed on a computer to which this setting applies, the setting is ignored. Note: This setting can be superseded by the "Enable Screen Saver" setting. If the "Enable Screen Saver" setting is disabled, this setting is ignored, and screen savers do not run. Counter Measure: Configure this policy setting to Enabled so that when the other screen saver settings are implemented the risk of a user's desktop session being hijacked by a passerby is reduced. Potential Impact: The screen saver will automatically activate when the computer has been unattended for the amount of time specified by the Screen Saver timeout setting. Fix: (1) GPO: User Configuration\Administrative Templates\Control Panel\Personalization\Force specific screen saver (2) REG: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop!SCRNSAVE.EXE (3) WMI: ###