Re: How not to apply
From: Laura E. Hunter \(MVP\) (hunter(nospamplease)_at_sfs.upenn.edu)
Date: 06/04/04
- Next message: John: "Active Desktop question"
- Previous message: Maggie: "GPO and TS"
- In reply to: Bruce Musgrove: "How not to apply"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 4 Jun 2004 09:44:26 -0400
You can configure filtering of Group Policy using either OUs or security
groups.
For the scenario you describe, you can create a second GPO that only
contains the relevant screensaver setting, then create a group containing
the relevant users and give them the "Read" and "Apply Group Policy"
permission for the GPO. (Removing those permissions for all other users.)
Remember that 2000 & XP machines & users can apply multiple GPOs, you don't
need to rely on just one.
-- ****************************** Laura E. Hunter - MCSE, MCT, MVP Replies to newsgroup only "Bruce Musgrove" <blackhole26removeme@comcast.net> wrote in message news:e78psYeSEHA.4068@TK2MSFTNGP09.phx.gbl... >I know this will be simple for several of you but for some reason my mind > can't grab this concept.... > > Screen saver is activated via GPA at the domain level. I have a few PC's > that we need to turn this feature off. > > How do I do this short of creating a new OU for these machines, blocking > inheritance, and then maintaining second GP identical to the Domain one > except for turning off the screen saver? > > I am trying to avoid having to maintain two separate GP's that are > identical except for the Screen saver issue. I don't mind activating a > second one just to turn off the screen saver, as long as I can keep the > root > domain level policy applying with my default settings. > >
- Next message: John: "Active Desktop question"
- Previous message: Maggie: "GPO and TS"
- In reply to: Bruce Musgrove: "How not to apply"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
