|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 |
Get-Command -Module GroupPolicy New-GPO -Name "ScreenSaverTimeOut" -Comment "Sets the time to 900 seconds" Set-GPRegistryValue -Name "ScreenSaverTimeOut" -Key "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" -ValueName ScreenSaveTimeOut -Type DWord -Value 900 New-GPLink -Name "ScreenSaverTimeOut" -Target "ou=people,dc=pagr,dc=inet" Get-GPO -Name "ScreenSaverTimeOut" | Get-GPOReport -ReportType HTML -Path $Home\report.html Invoke-Item $Home\report.html # Configure Advanced Settings ## Inherited Group Policies Get-GPInheritance -Target "ou=people,dc=pagr,dc=inet" ## Blocking inheritance Set-GPInheritance -Target "ou=people,dc=pagr,dc=inet" -IsBlocked 1 ## Enforcing Group Policies Set-GPLink -Name "Default Domain Policy" -Target "dc=pagr,dc=inet" -Enforced Yes ## Configure Security Settings Set-GPPermission -Name "ScreenSaverTimeOut" -TargetName "Authenticated Users" -TargetType User -PermissionLevel None Set-GPPermission -Name "ScreenSaverTimeOut" -TargetName "Authenticated Users" -TargetType User -PermissionLevel GPORead Set-GPPermission -Name "ScreenSaverTimeOut" -TargetName "Petra" -TargetType User -PermissionLevel GPOApply |