Question about locking down access to settings in gnome-shell...

[Sean <smalder73 gmail com>]

Hi,

Greetings, this is my first post to the list. Please accept my apology if this topic is better suited for another list and if so, I would appreciate your direction as to which one.

I am working on locking down various user settings using dconf locks and applying the config using puppet templates.  I'm managing a bunch of multi-user gnome desktops on Scientific Linux 7.1 with gnome-shell 3.8.4-45.el7 for a class room environment, but I'm struggling with what dconf/gsettings key locks access to the Settings / Privacy / Screen Lock / Automatic Screen Lock toggle.

Currently my /etc/dconf/db/site.d/locks/01-site-locks file looks like this:
(keys that I'm aware of which manage screen lock properties are in bold)
# lock down desktop settings
/org/gnome/settings-daemon/peripherals/smartcard/removal-action
/org/gnome/desktop/lockdown/user-administration-disabled
/org/gnome/desktop/lockdown/disable-lock-screen
/org/gnome/desktop/notifications/show-in-lock-screen
/org/gnome/desktop/session/idle-delay
/org/gnome/desktop/sound/event-sounds
/org/gnome/desktop/privacy/show-full-name-in-top-bar
/org/gnome/desktop/privacy/hide-identity
/org/gnome/desktop/screensaver/show-full-name-in-top-bar
/org/gnome/desktop/screensaver/lock-delay
/org/gnome/login-screen/banner-message-enable
/org/gnome/login-screen/banner-message-text
/org/gnome/login-screen/disable-user-list
/org/gnome/login-screen/enable-fingerprint-authentication

For each of these keys, I'm also setting a value in /etc/dconf/db/site.d/01-site-settings.  Any advice would be most appreciated.  Thank you!

--Sean