Endpoint Protection

Dear All,

This document is helpful for workgroup environment computers where we want to block registry
modification of screensaver through SEP Application & Device control Policy.

1.To hide Screensaver tab from desktop propeties:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispScrSavPage"=dword:00000001

Value-0(show screensaver tab)
Value-1(hide screensaver tab)

2. Create a group and Create a new application rule- Registry Access Attempts.
3. Add registry key "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System"
4. Add Registry Value Name "NoDispScrSavPage"
5. Set the Actions Read Attempt- Allow access , Create.delete or write- Block Access.
6. Update the policy and try to change registry setting on the client pc. It should not allow to change screensaver registry value.

Regards,

Ajeet