Skip to main content

Protect Screen Lock

Summary​

This script sets a specified .scr file as the default screensaver for all users, manages lockscreen timeout settings, and handles domain exceptions using Strapper. If no screensaver path is provided, this portion of the script is skipped. CW RMM implementation of the agnostic script Protect-Screenlock.

Sample Run​

Sample Run 1
Sample Run 2
Sample Run 3

Dependencies​

Protect Screen Lock Script

User Parameters​

NameExampleRequiredDefaultTypeDescription
ScreenSaverPathC:/Temp/ScreenSaver/Saver.scrFalseText StringOptional parameter to specify the path of the screensaver file. The script will not set a screensaver if this parameter is not provided.
Timeout900True900Number ValueThe maximum timeout value for the screensaver. Defaults to 900 seconds.
DomainException0/1FalseFlagSet to run a GPRESULT instead of making configuration changes when a machine is part of a domain.

User Parameters Image

Task Creation​

Create a new Script Editor style script in the system to implement this task.
Task Creation Step 1
Task Creation Step 2

Name: Protect Screen Lock
Description: This script sets a specified .scr file as the default screensaver for all users, manages lockscreen timeout settings, and handles domain exceptions using Strapper. If no screensaver path is provided, this portion of the script is skipped.
Category: Security
Task Creation Step 3

Parameters​

ScreensaverPath​

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.
ScreensaverPath Step 1

This screen will appear.
ScreensaverPath Step 2

  • Set ScreensaverPath in the Parameter Name field.
  • Select Text String from the Parameter Type dropdown menu.
  • Click the Save button.
    ScreensaverPath Step 3

Timeout:​

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.
Timeout Step 1

This screen will appear.
Timeout Step 2

  • Set Timeout in the Parameter Name field.
  • Enable the Required Field button.
  • Select Number Value from the Parameter Type dropdown menu.
  • Enable the Default Value button.
  • Set 900 in the Value field.
  • Click the Save button.
    Timeout Step 3

Domain Exception:​

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.
Domain Exception Step 1

This screen will appear.
Domain Exception Step 2

  • Set DomainException in the Parameter Name field.
  • Select Flag from the Parameter Type dropdown menu.
  • Click the Save button.
    Domain Exception Step 3

Task​

Navigate to the Script Editor Section and start by adding a row. You can do this by clicking the Add Row button at the bottom of the script page.
Task Creation Row Step 1

A blank function will appear.
Task Creation Row Step 2

Row 1 Function: PowerShell Script​

Search and select the PowerShell Script function.
Row 1 Step 1
Row 1 Step 2

The following function will pop up on the screen:
Row 1 Step 3

Paste in the following PowerShell script and set the Expected time of script execution in seconds to 300 seconds. Click the Save button.

#region parameters
$ScreensaverPath = '@ScreensaverPath@'
$Timeout = '@Timeout@'
$DomainException = '@DomainException@'
$Parameters = @{}
if ( $ScreensaverPath -match '\.scr' ) {
    $Parameters.add('ScreensaverPath', $ScreensaverPath)
}
if ( $Timeout -match '^[0-9]{1,}$' ) {
    $Parameters.Add('Timeout', $Timeout)
} else {
    $Parameters.Add('Timeout', 900)
}
if ($DomainException -match '1|Yes|True') {
    $Parameters.Add('DomainException', $true)
}
#endregion
#region Setup - Variables
$ProjectName = 'Protect-Screenlock'
[Net.ServicePointManager]::SecurityProtocol = [enum]::ToObject([Net.SecurityProtocolType], 3072)
$BaseURL = 'https://file.provaltech.com/repo'
$PS1URL = "$BaseURL/script/$ProjectName.ps1"
$WorkingDirectory = "C:\ProgramData\_automation\script\$ProjectName"
$PS1Path = "$WorkingDirectory\$ProjectName.ps1"
$WorkingPath = $WorkingDirectory
$LogPath = "$WorkingDirectory\$ProjectName-log.txt"
$ErrorLogPath = "$WorkingDirectory\$ProjectName-Error.txt"
#endregion
#region Setup - Folder Structure
New-Item -Path $WorkingDirectory -ItemType Directory -ErrorAction SilentlyContinue | Out-Null
try {
    Invoke-WebRequest -Uri $PS1URL -OutFile $PS1path -UseBasicParsing -ErrorAction Stop
} catch {
    if (!(Test-Path -Path $PS1Path )) {
        throw ('Failed to download the script from ''{0}'', and no local copy of the script exists on the machine. Reason: {1}' -f $PS1URL, $($Error[0].Exception.Message))
    }
}
#endregion
#region Execution
if ($Parameters) {
    & $PS1Path @Parameters
} else {
    & $PS1Path
}
#endregion
#region log verification
if ( !(Test-Path $LogPath) ) {
    throw 'PowerShell Failure. A Security application seems to have restricted the execution of the PowerShell Script.'
}
if ( Test-Path $ErrorLogPath ) {
    $ErrorContent = ( Get-Content -Path $ErrorLogPath )
    throw $ErrorContent
}
Get-Content -Path $LogPath
#endregion

Row 1 Step 4

Row 2 Function: Script Log​

Add a new row by clicking the Add Row button.
Row 2 Step 1

A blank function will appear.
Row 2 Step 2

Search and select the Script Log function.
Row 2 Step 3

The following function will pop up on the screen:
Row 2 Step 4

In the script log message, simply type %Output% and click the Save button.
Row 2 Step 5

Click the Save button at the top-right corner of the screen to save the script.
Row 2 Step 6

Completed Task​

Completed Task

Output​

  • Script log