Windows 10 idle lock timer; 15 minutes

Texkonc

I am purposely cross posting for coverage, more the merrier.
Backstory:

Moved users to Azure AD. Of course there is no GPO unless you want to pay to enable AD DS and run a VM in Azure. Goal for this customer is to be serverless so that is not an option.

All of the google I have done with "screen lockout timer" and various other searches come up with all the pictures changes, sleep of the password window showing at the console of windows. Nothing I have found says, this reg key turn to 15 to enable 15 minute timer of being idle and the screen locks.

All I need is simple 15 minute idle timer that will then lock the computer, something simple that has been done before, I just need the registry settings in Windows 10 that you can change the value to like 15 to accomplish this.

Surely someone has done this in a workgroup environment to since that is essentially what this is. We have an RMM tool that will allow remote registry changes.

dbeato

Not even this?

powercfg.exe /SETACVALUEINDEX SCHEME_CURRENT SUB_VIDEO VIDEOCONLOCK 300

or

Registry Hive: HKEY_LOCAL_MACHINE 
Registry Path: \Software\Microsoft\Windows\CurrentVersion\Policies\System\

Value Name: InactivityTimeoutSecs

Value Type: REG_DWORD
VALUE: 300

black3dynamite

New-ItemProperty `
-Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
-Name "InactivityTimeoutSecs" `
-PropertyType "DWord" `
-Value "0"

NerdyDad

I know you said they are trying to go serverless, but how about Salt or Ansible?

Dashrender

@nerdydad said in Windows 10 idle lock timer; 15 minutes:

I know you said they are trying to go serverless, but how about Salt or Ansible?

Good question - he could just as easily use Intune or an MDM solution (like SodiumSuite).

Texkonc

@dbeato said in Windows 10 idle lock timer; 15 minutes:

Not even this?

powercfg.exe /SETACVALUEINDEX SCHEME_CURRENT SUB_VIDEO VIDEOCONLOCK 300

or

Registry Hive: HKEY_LOCAL_MACHINE 
Registry Path: \Software\Microsoft\Windows\CurrentVersion\Policies\System\

Value Name: InactivityTimeoutSecs

Value Type: REG_DWORD
VALUE: 300

Nope and Nope.

Texkonc

@black3dynamite said in Windows 10 idle lock timer; 15 minutes:

New-ItemProperty `
-Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
-Name "InactivityTimeoutSecs" `
-PropertyType "DWord" `
-Value "0"

Nope.

Texkonc

@dashrender said in Windows 10 idle lock timer; 15 minutes:

@nerdydad said in Windows 10 idle lock timer; 15 minutes:

I know you said they are trying to go serverless, but how about Salt or Ansible?

Good question - he could just as easily use Intune or an MDM solution (like SodiumSuite).

Intune cost extra.

scottalanmiller

@texkonc said in Windows 10 idle lock timer; 15 minutes:

@dashrender said in Windows 10 idle lock timer; 15 minutes:

@nerdydad said in Windows 10 idle lock timer; 15 minutes:

I know you said they are trying to go serverless, but how about Salt or Ansible?

Good question - he could just as easily use Intune or an MDM solution (like SodiumSuite).

Intune cost extra.

A lot extra.

Dashrender

Have you looked through a system that does have GPO to find the manner in which it is applying this update?

Dashrender

I created a new GPO, made this setting:

https://i.imgur.com/9VHgdDy.png

Then found the UID for the policy

https://i.imgur.com/9301ycG.png

Found the policy
https://i.imgur.com/utLxTaZ.png

Unicode=yes
[Version]
signature="$CHICAGO$"
Revision=1
[Registry Values]
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\InactivityTimeoutSecs=4,900

Dashrender

This points to the same place that others have pointed out, but seems to have two values 4 and 900, I'm assuming it's to set the type.