Screensaver timout settings affecting TS logins

[sherah]

I have a GP applied to all users that has the User Configuration enabling Hide Screensaver Tab, Screen Saver, Screen Saver Executable Name (set to c:\winnt\system32\logon.scr), Password Protect Screensaver and Screensaver Timeout set to 900 seconds.

It works just fine when any user is just logged on to any PC. My problem is that when a user is logged on to a Citrix published application from one of our Terminal Servers, this GP is also affecting their logon to that Terminal Server. The end result is that when they are inactive on their PC for 900 seconds, they not only have to enter their Windows password once to unlock their PC, they must also enter their Windows password a second time to unlock the Windows 2000 Server screensaver. Also, if they are logged on to the Citrix published application but have not used it for 900 seconds, but are actively using a local application, the Windows 2000 Server screensaver lock will still display and force them to enter their Windows password again.

I'm guessing I need to somehow block this GP from affecting our Terminal Servers, but haven't been able to find the proper way to do so.

My Servers are running Windows 2000 Server SP4, my PC's are a mixture of W2K SP4 and XP SP2, we are currently running Citrix Metaframe 1.8, SP3.

Any help would be greatly appreciated!

[AdamV]

I replied to your other copy of the same question here:
http://www.gpanswers.com/community/viewtopic.php?t=876&highlight=

Don't bother posting twice, it doesn't really make it more likely for people to find, but it can make answer threads harder to follow.