ummm.... so how would he run _any_ program/batch without entering the
password? ;P
Since what Ned wants to is disable the screensaver, leaving it login
protected only, he should just use control panel like everyone else. If it's
too much of a pain to type a password once every 15 minutes, just set the
screensaver timer higher.
--
Todd Vargo (body of message must contain my name to reply by email)
> Good day, I need a batch file that will shut off the screensaver
> on a pc. (Windows 2000)
>
> The set up:
>
> The company I work for has a policy that requires this password
> protected screensaver for everyone. We have a screensaver that
> runs after 15 minutes, and is also password protected. Now what I
> need is a way for a user, (In this case a senior VP) to be able to
> just run a batch file and shut off the screensaver and clear the
> password requirement for that session.
>
> Since this is a VP we need to make this as idiot proof as
> possible.
>
> Once the user reboots, or logs back in, the screensaver should
> come back in.
>
> Any ideas on how I can do this, or if it is even possible?
I suggest a local user logoff script to merge the settings back into
HKCU on logoff (to re-instate the SS and PWD requirements). For
manually disabling I suggest that even a VP can use Desktop
Properties, Screensaver tab, ....
I have not attempted this and cannot confirm it will work. I also do
not have the registry changes handy but you can easily track them
with REGMON or other utility.
Matthias is bang-on correct. I would tell the VP that the level of access
accorded to his account is so important to the livelihood of the company
that defeating the security mechanism to make things more convenient for
him, the authorized user, will put the company at risk.
Some people think that security measures seem designed to make it harder for
the authorized users to get their work done. In fact, the opposite is true.
Just delete all passwords and change all security settings to full control
to all users. Sure, they get the quick logon, but just wait a couple of
weeks...
/Al
Screensaver passwords are not theft secure. For laptop computers, a secure
system would be to set both BIOS and hard drive passwords to prevent all
access to the hard drive and loading the OS.
AFAIK, a stolen laptop hard drive is rendered useless if it has a HD
password set. The stolen laptop described should have had this maximum
security active.
As far as network security goes, a screensaver password has nothing to do
with logon access.
>
> Meanwhile I did find a freeware utility that may fit the bill. I need
> to test it and see how it works and contact the creator and see if we
> can use if for corporate use. (20 people max)
Where can I download this freeware to test it for myself?
Also, for only 20 machines, why can the screensaver password not just be
disabled manually for the lazy users that don't want it? ISTM, if disabling
the password is forbidden, then using any freeware to do it is equally
considered tampering with the system. IMO, this smells of some user trying
to disable his boss' password without the boss knowing. :-O
--
Greetings
Matthias
I trust the user got a good reaming out. There's no excuse for leaving a
laptop loaded with sensitive data unattended. Some organizations won't
allow sensitive data on laptops under any conditions. If you don't have
physical security, you don't have any security at all.
--
Gary L. Smith gls...@yahoo.com
Columbus, Ohio