Enforcing Screen Saver Policy

I've found several topics in the forum as well as across the web, but I cannot find an answer to this. I'm beginning to think it may actually be a sort of bug in WGM, but I'd like to see if anyone else can vouch for that. I'm just going to duplicate and link my post on Apple's discussion board. http://discussions.apple.com/thread.jspa?threadID=1684112&tstart=0 We are using a 10.5.4 server with all 10.5.4 clients. The server is running OD only in the "Golden" or "Magic Triangle" configuration. Basically, this server is our point of managed preferences for our macs while we use Group Policy for all our PCs. Authentication is done through AD. I have had success adding various policies to test machines, but one continues to evade me. I can force the computer to lock on screensaver, but I am having difficulty setting a permanent timeout or "Idle Time" for the screen saver. I have tried adding the "Idle Time" preference to the manifest in both "Often" (a supported area) and "Always" (one that throws a warning), but neither seem to effect the computers actually screen saver time. Note: If "Always" is set, that time will show in the /Library/Managed Preferences//...plist file, but the actual policy doesn't appear to be enforced. Here are the sources I've used for setting up screen saver policies: http://discussions.apple.com/thread.jspa?messageID=7251806 http://managingosx.wordpress.com/2008/02/20/mcx-vs-the-screensaver-and-leopard/ Is there even a way to enforce either 1) an exact time for the screen saver to be invoked or at least 2) a maximum wait time allowed for it to be set to? Thanks all! *Side note: I noticed that if I import com.apple.screensaver (not ByHost) it does create a plist in the byhost folder for the user, but it uses the old file naming scheme (with Mac address instead of UUID). Even though that is the case, it will still enforce the password on wake policy. The idle time though is not enforced.