Trying to find the console lock display timeout settings for the GPO. Doesn't exist as far as I can tell. I guess I will just have to modify the reg and manually make the change.
I had to make reg changes via GPO for mine.. it was pretty easy.
Now, if I could figure out which registry setting is to set the "Console lock display off timeout" option to 0, I could just do a single step using a reg GPO.
You could also do a logon script that runs the powercfg line
I think I am just going to use PDQ Deploy for the powercfg command and set the command to run during the initial deployment phase. It should only need to be run once.
I'd be worried that future major updates (the twice yearly thing) might reset it... so finding a way to keep it (stateful) would be good.