Re: Reverting GPO settings back to Default



Well, keep in mind that Screen Saver policy is per-user, so if the user account isn't moving to a different OU as well, then nothing is going to change for that user, regardless of where their laptop computer account resides.

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php


"Bill Bradley" <BillBradley@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:9BC28CE4-EF88-4BFD-8A7A-FD7721DA6B43@xxxxxxxxxxxxxxxx
For a specific, the Screen Saver timeout is set to 600 seconds (10 minutes)
in "our" GPO, but, is Not Defined in "their" GPO, however, it's grayed out on
the laptop in question, so, is "stuck". That's under the Administrative
Template, and, should no longer be applied, right?

<q1:Policy>
<q1:Name>Screen Saver timeout</q1:Name>
<q1:State>Enabled</q1:State>
<q1:Explain>Specifies how much user idle time must elapse before
the screen saver is launched.\n\nWhen configured, this idle time can be set
from a minimum of 1 second to a maximum of 86,400 seconds, or 24 hours. If
set to zero, the screen saver will not be started.\n\nThis setting has no
effect under any of the following circumstances:\n\n - The setting is
disabled or not configured.\n\n - The wait time is set to o.\n\n -
The "No screen saver" setting is enabled.\n\n - Neither the "Screen saver
executable name" setting nor the Screen Saver tab of the client computer's
Display Properties dialog box specifies a valid existing screensaver program
on the client.\n\nWhen not configured, whatever wait time is set on the
client through the Screen Saver tab of the Display Properties dialog box is
used. The default is 15 minutes.</q1:Explain>
<q1:Supported>At least Microsoft Windows 2000 Service Pack
1</q1:Supported>
<q1:Category>Control Panel/Display</q1:Category>
<q1:Text>
<q1:Name>Number of seconds to wait to enable the Screen
Saver</q1:Name>
</q1:Text>
<q1:Text>
<q1:Name> </q1:Name>
</q1:Text>
<q1:Numeric>
<q1:Name>Seconds:</q1:Name>
<q1:State>Enabled</q1:State>
<q1:Value>600</q1:Value>
</q1:Numeric>


"Darren Mar-Elia" wrote:

Administrative Template policy settings should get undone during the next
processing cycle that a computer or user is no longer in scope of those
originating GPOs. So, if that's not happening, something is wrong. However,
other policy, such as security, will not revert (mostly because it doesn't
know what to revert to :)). Other areas, like software installation or
Folder Redirection, will revert based on how you set them up.

Darren
--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at
http://www.sdmsoftware.com/products.php


"Bill Bradley" <BillBradley@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2CE78AF4-BF7B-445E-944A-8469B49098C0@xxxxxxxxxxxxxxxx
> We have an ADS Tree where each site has its own OU, and, in my site's > OU,
> I
> have a GPO set up that basically makes XP "look" like 2K. We gave a
> laptop
> away to another site and the workstation account was moved to that > site's
> OU
>
> Later, the user complained that "he didn't have the standard XP > "look"".
>
> I assumed that, once the workstation account was no longer being > affected
> by
> the GPO, the settings would revert to Default, but, I guess they > didn't.
>
> What's the easiest way to get them back to Default (or Not Defined)--I
> don't
> REALLY want to have to put in exact opposite individual settings.
>
> And, is this true in ALL cases, that things don't revert?
>
> Thanks.


.



Relevant Pages

  • Re: basic GP question
    ... "Windows cannot query for the list of Group Policy objects. ... > Windows Platform Support Team ... users could set there own options for screen saver timeout and password ...
    (microsoft.public.windows.group_policy)
  • Re: basic GP question
    ... >> You can use the Group Policy Management Console to model your ... >> Enterprise Management with the Group Policy Management Console ... >>> changed the Display settings for the screen saver - i changed the screen ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy Problem
    ... The account that the server logs in with is ... registry key that allows me to see the screen saver tab but the options ... I tried logging in as myself and the group policy applied as I ... When I logged off and then back on as administrator, ...
    (microsoft.public.win2000.active_directory)
  • Re: Screensaver lockout in Group Policy
    ... What exact policy setting are you working with? ... off of the top of my head I think you are saying you 'lock the workstation' ... In policy you have "Hide Screen Saver", which hides the screen saver tab ...
    (microsoft.public.win2000.group_policy)
  • Re: Loopback processing not working
    ... Well you could just deny the right to apply the policy for the screen saver ... I understand that loopback processing within a policy is the route to go ... Policy Setting ... Password protect the screen saver Enabled ...
    (microsoft.public.windows.server.active_directory)