Hello all. I have a domain that has three Domain Controllers. One Win2003R2, one Win2003, and one Win2008. We have several Windows 7 clients now (probably half of our people). I have been asked to create a GPO to enforce a 15 minute timeout and workstation lock for screensavers. My response was, "No problem." Then I found that Windows 7 change the location of those settings in the policy. Where they were at User Configuration/Administrative Templates/Control Panel/Display in WinXP and Vista, the settings are now at User Configuration/Administrative Templates/Control Panel/Personalization. I tried installing RSAT on my Windows 7 machine but I still do not see the "Personalization" section. The settings are still under "Display". Then I thought, perhaps I need to import a template, but the ControlPanelDisplay template is an ADMX file and the GPMC is only letting me import ADM files. So then I figured I could take advantage of Preferences, and I proceeded to create a GPO with registry entries for the settings I wanted to make, but that isn't working either (of course, I cannot see the registry entries from a 2003 DC, but I can from the 2008 DC). My workstation is authenticating (and receiving policy from) a 2003 DC. Is there a way for me to get the locking screensaver GPO created with the domain as it is, or will I need to do some sort of schema extension or OS update on the DCs? The other option I can think of is to somehow force Windows 7 into getting the GPO from the 2008 DC that I can see the preferences from. Anyone have any ideas for me? If SuperLilia is reading I'll just say that I was at two of your sessions at MMS and I not only thought they were awesome, but I can assure you that I don't have anywhere near 44,000 GPOs in my domain. I also will not touch my default domain policy, which is something else I can see will incur great wrath :)John DeVito

John, i believe that the windows xp GPO's still apply to windows 7 The only difference that you they change locations of the settings to make it easier for an adminstrator to find what he is looking for. I quote microsoft : Changes to legacy Group Policy settings In Windows 7, many legacy Group Policy settings have been removed or located so that domain administrators can find all of the relevant options in one place. The full path of this node in the Group Policy Management Console is: User Configuration\Administrative Templates\Control Panel\Personalization Available policy settings: Name Explanation Requirements Prevent changing color scheme This policy setting is removed in Windows 7. If you enable the Prevent changing window color and appearance policy setting, you can prevent users from changing the colors and system metrics of your windows. Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP Prevent changing theme This policy setting allows you to prevent users from selecting a different theme or saving any of their customized themes. If you enable this policy setting, the theme gallery in Personalization in Control Panel does not function. At least Windows XP Professional or Windows Server 2003 family Password protect the screen saver This policy setting allows you to lock the system. If you enable this policy setting, the system locks at a user-defined interval. This policy setting is effective even when no screen saver is selected. Note If you want to control the time interval, use the Screen saver timeout Group Policy setting. At least Windows 2000 Service Pack 1 Screen saver timeout This policy setting allows you to specify the amount of idle time that must elapse before launching the screen saver. If you enable this policy setting with the Enable screen saver policy setting, you ensure that the system lock will work even when no screen saver is selected. Note The system will lock at a user-defined interval. If you want to control the time interval, use the Screen saver timeout policy setting. Source: http://technet.microsoft.com/en-us/library/ee617164(WS.10).aspx The policies that you need to set are: Password protect the screen saver Screen saver timeout Kind Regards DFT IM me - TWiTTer: @DFTER