{"id":225,"date":"2017-11-30T21:42:15","date_gmt":"2017-11-30T21:42:15","guid":{"rendered":"http:\/\/www.edrockwell.com\/blog\/?p=225"},"modified":"2017-11-30T21:42:15","modified_gmt":"2017-11-30T21:42:15","slug":"set-screen-lock-local-policy-non-domain-server","status":"publish","type":"post","link":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/","title":{"rendered":"How to set screen saver lock screen local policy on a non domain server"},"content":{"rendered":"<p>After being tasked to set up a screen saver password or a lock screen for inactivity on servers that are not joined to a domain, I decided to post this so it&#8217;s easier to find when others are searching for this.<\/p>\n<p>To be PCI compliant, this is a requirement for any servers that are in-scope for your payment system.<\/p>\n<p>For Microsoft Windows 2008 and 2012, it is easy to do but you have to set all three settings below for it to become active. This will enable a screen saver policy that locks your screen after a set time of inactivity. For PCI controlled servers, this is a requirement and must be less than 15 minutes.<\/p>\n<p>This is easily done if the computer is part of an Active Directory domain but not as easily done if they are members of a workgroup.<\/p>\n<h2>How to Set the Screen Saver Lock Screen<\/h2>\n<p>The procedure is to open MMC snapin and add the Local Computer Policy snapin. To do this, click on the Windows button, and then simply type in MMC. For Windows 2012, select MMC snapin (mmc.exe) and not the Embedded Lockdown Manager.<\/p>\n<p>Then navigate to User Configuration &gt;&gt; Administrative Templates &gt;&gt; Control Panel &gt;&gt; Personalization (as seen in the graphic I\u2019ve attached).<\/p>\n<p>Set the following settings:<br \/>\nEnable Screensaver: Enabled<br \/>\nPassword protect the screen saver: Enabled<br \/>\nScreen saver timeout: Enabled with a value of 600<\/p>\n<p>No need to reboot. Just log out and back in and the setting will be applied. Then wait 10 minutes to verify that your screen locks.<\/p>\n<p>Here is a graphic of what needs to be set:<\/p>\n<div id=\"attachment_226\" style=\"width: 664px\" class=\"wp-caption alignnone\"><a href=\"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-226\" class=\"size-full wp-image-226\" src=\"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg\" alt=\"\" width=\"654\" height=\"349\" srcset=\"https:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg 654w, https:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity-300x160.jpg 300w, https:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity-624x333.jpg 624w\" sizes=\"auto, (max-width: 654px) 100vw, 654px\" \/><\/a><p id=\"caption-attachment-226\" class=\"wp-caption-text\">How to set a local policy to activate the lock screen on servers.<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>After being tasked to set up a screen saver password or a lock screen for inactivity on servers that are not joined to a domain, I decided to post this so it&#8217;s easier to find when others are searching for this. To be PCI compliant, this is a requirement for any servers that are in-scope [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[68,92,93],"tags":[94,96,95],"class_list":["post-225","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-pci","category-security","tag-pci","tag-screensaver","tag-set-windows-lock-screen"],"aioseo_notices":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to set screen saver lock screen local policy on a non domain server - System Admin [RESOLVED]<\/title>\n<meta name=\"description\" content=\"How to enable the lock screen on windows servers that are not joined to a domain (Non Domain)\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to set screen saver lock screen local policy on a non domain server - System Admin [RESOLVED]\" \/>\n<meta property=\"og:description\" content=\"How to enable the lock screen on windows servers that are not joined to a domain (Non Domain)\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/\" \/>\n<meta property=\"og:site_name\" content=\"System Admin [RESOLVED]\" \/>\n<meta property=\"article:published_time\" content=\"2017-11-30T21:42:15+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg\" \/>\n<meta name=\"author\" content=\"Ed Rockwell\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@EddieRock\" \/>\n<meta name=\"twitter:site\" content=\"@EddieRock\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ed Rockwell\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/\"},\"author\":{\"name\":\"Ed Rockwell\",\"@id\":\"https:\/\/www.edrockwell.com\/blog\/#\/schema\/person\/e181b98aceccea720abee0c25bbfbcd7\"},\"headline\":\"How to set screen saver lock screen local policy on a non domain server\",\"datePublished\":\"2017-11-30T21:42:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/\"},\"wordCount\":303,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg\",\"keywords\":[\"PCI\",\"screensaver\",\"Set Windows Lock Screen\"],\"articleSection\":[\"Active Directory\",\"PCI\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/\",\"url\":\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/\",\"name\":\"How to set screen saver lock screen local policy on a non domain server - System Admin [RESOLVED]\",\"isPartOf\":{\"@id\":\"https:\/\/www.edrockwell.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg\",\"datePublished\":\"2017-11-30T21:42:15+00:00\",\"author\":{\"@id\":\"https:\/\/www.edrockwell.com\/blog\/#\/schema\/person\/e181b98aceccea720abee0c25bbfbcd7\"},\"description\":\"How to enable the lock screen on windows servers that are not joined to a domain (Non Domain)\",\"breadcrumb\":{\"@id\":\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#primaryimage\",\"url\":\"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg\",\"contentUrl\":\"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.edrockwell.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to set screen saver lock screen local policy on a non domain server\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.edrockwell.com\/blog\/#website\",\"url\":\"https:\/\/www.edrockwell.com\/blog\/\",\"name\":\"System Admin [RESOLVED]\",\"description\":\"How To: Make My DevOps Life Easier\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.edrockwell.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.edrockwell.com\/blog\/#\/schema\/person\/e181b98aceccea720abee0c25bbfbcd7\",\"name\":\"Ed Rockwell\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/dea3152d7acd78aa28d280207c33f7ec516731ece9a54249cbbbebcfffc341e0?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/dea3152d7acd78aa28d280207c33f7ec516731ece9a54249cbbbebcfffc341e0?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/dea3152d7acd78aa28d280207c33f7ec516731ece9a54249cbbbebcfffc341e0?s=96&d=mm&r=g\",\"caption\":\"Ed Rockwell\"},\"sameAs\":[\"http:\/\/www.therockwells.net\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to set screen saver lock screen local policy on a non domain server - System Admin [RESOLVED]","description":"How to enable the lock screen on windows servers that are not joined to a domain (Non Domain)","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/","og_locale":"en_US","og_type":"article","og_title":"How to set screen saver lock screen local policy on a non domain server - System Admin [RESOLVED]","og_description":"How to enable the lock screen on windows servers that are not joined to a domain (Non Domain)","og_url":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/","og_site_name":"System Admin [RESOLVED]","article_published_time":"2017-11-30T21:42:15+00:00","og_image":[{"url":"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg","type":"","width":"","height":""}],"author":"Ed Rockwell","twitter_card":"summary_large_image","twitter_creator":"@EddieRock","twitter_site":"@EddieRock","twitter_misc":{"Written by":"Ed Rockwell","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#article","isPartOf":{"@id":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/"},"author":{"name":"Ed Rockwell","@id":"https:\/\/www.edrockwell.com\/blog\/#\/schema\/person\/e181b98aceccea720abee0c25bbfbcd7"},"headline":"How to set screen saver lock screen local policy on a non domain server","datePublished":"2017-11-30T21:42:15+00:00","mainEntityOfPage":{"@id":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/"},"wordCount":303,"commentCount":0,"image":{"@id":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#primaryimage"},"thumbnailUrl":"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg","keywords":["PCI","screensaver","Set Windows Lock Screen"],"articleSection":["Active Directory","PCI","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/","url":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/","name":"How to set screen saver lock screen local policy on a non domain server - System Admin [RESOLVED]","isPartOf":{"@id":"https:\/\/www.edrockwell.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#primaryimage"},"image":{"@id":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#primaryimage"},"thumbnailUrl":"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg","datePublished":"2017-11-30T21:42:15+00:00","author":{"@id":"https:\/\/www.edrockwell.com\/blog\/#\/schema\/person\/e181b98aceccea720abee0c25bbfbcd7"},"description":"How to enable the lock screen on windows servers that are not joined to a domain (Non Domain)","breadcrumb":{"@id":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#primaryimage","url":"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg","contentUrl":"http:\/\/www.edrockwell.com\/blog\/wp-content\/uploads\/2017\/11\/SetLockScreenOnInactivity.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.edrockwell.com\/blog\/set-screen-lock-local-policy-non-domain-server\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.edrockwell.com\/blog\/"},{"@type":"ListItem","position":2,"name":"How to set screen saver lock screen local policy on a non domain server"}]},{"@type":"WebSite","@id":"https:\/\/www.edrockwell.com\/blog\/#website","url":"https:\/\/www.edrockwell.com\/blog\/","name":"System Admin [RESOLVED]","description":"How To: Make My DevOps Life Easier","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.edrockwell.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.edrockwell.com\/blog\/#\/schema\/person\/e181b98aceccea720abee0c25bbfbcd7","name":"Ed Rockwell","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/dea3152d7acd78aa28d280207c33f7ec516731ece9a54249cbbbebcfffc341e0?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/dea3152d7acd78aa28d280207c33f7ec516731ece9a54249cbbbebcfffc341e0?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/dea3152d7acd78aa28d280207c33f7ec516731ece9a54249cbbbebcfffc341e0?s=96&d=mm&r=g","caption":"Ed Rockwell"},"sameAs":["http:\/\/www.therockwells.net"]}]}},"_links":{"self":[{"href":"https:\/\/www.edrockwell.com\/blog\/wp-json\/wp\/v2\/posts\/225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.edrockwell.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.edrockwell.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.edrockwell.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.edrockwell.com\/blog\/wp-json\/wp\/v2\/comments?post=225"}],"version-history":[{"count":1,"href":"https:\/\/www.edrockwell.com\/blog\/wp-json\/wp\/v2\/posts\/225\/revisions"}],"predecessor-version":[{"id":227,"href":"https:\/\/www.edrockwell.com\/blog\/wp-json\/wp\/v2\/posts\/225\/revisions\/227"}],"wp:attachment":[{"href":"https:\/\/www.edrockwell.com\/blog\/wp-json\/wp\/v2\/media?parent=225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.edrockwell.com\/blog\/wp-json\/wp\/v2\/categories?post=225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.edrockwell.com\/blog\/wp-json\/wp\/v2\/tags?post=225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}