MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)ID: oval:org.secpod.oval:def:7706 | Date: (C)2012-10-30 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
The time in seconds before the screen saver grace period expires (ScreenSaverGracePeriod) setting should be configured correctly.
The registry value entry ScreenSaverGracePeriod was added to the template file in the HKEY_LOCAL_MACHINE\\SYSTEM\\Software\\Microsoft\\ Windows NT\\CurrentVersion\\Winlogon\\ registry key. The entry appears as MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended) in the SCE. Windows includes a grace period between when the screen saver is launched and when the console is actually locked automatically when screen saver locking is enabled. This setting is configured to 0 seconds for both of the environments that are discussed in this guide.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)
(2) KEY: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ScreenSaverGracePeriod
Platform: |
Microsoft Windows Server 2008 R2 |