can't override screen saver policy

We've enabled a mandatory screen saver policy and applied it at the
domain level - it works as it's supposed to.

There's a handful of machines we don't want this policy to apply to,
and we don't want to muck around with GP permissions, or create
exception OU's, play with GP deny settings etc.

We should just be able to specify a local policy to override (as local
is first in order or precedence).

However we can't get it to work. Clients are XP SP2.

I specify the settings locally, log off and on, tried rebooting as well
- but when I check the registry key
HKCU\SW\policies\Microsoft\Windows\Control Panel\Desktop it keeps
showing the entries from the domain policy.

What gives?

.

Relevant Pages

  • Re: Domain
    ... Domain Controller Security Policy has all user rights assignments ... Configuring ipsec policy at the domain level ...
    (microsoft.public.win2000.group_policy)
  • Re: Security hierarchy
    ... policy level also. ... >>can be configured only at domain level. ... Try running security configuration and ... >>try not to change domain and domain controller policy, ...
    (microsoft.public.win2000.security)
  • Re: Security hierarchy
    ... policy level - must be done at domain level. ... >>set domain policy to be disabled, used secedit refresh and was able to ... Effective local policy reflected what ...
    (microsoft.public.win2000.security)
  • Re: Login Scripts
    ... Default Domain Policy) that contains the "baseline" settings that users ... at the OU level will override settings declared at the domain level, and GPO ... > domain if no MSI package is found. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Lockout Threshold change - Not taking effect
    ... The other policy is linked at the domain level. ... I even changed the settings to 5 attempt. ... Have you tried unlinking the additional GPO you've created at the Domain ...
    (microsoft.public.windows.server.active_directory)