RE: Excluding only certain users from Screen Saver Policy settings

Tech-Archive recommends: Fix windows errors by optimizing your registry

Sorry, am still confused...

If the superior GPO has "Screen Saver Timeout" set to 10 minutes, and, the
lower one has it as not configured, what will be the result? My concern is
that the not configured settings will overwrite things with settings.

Thanks--sorry to be so slow!

"Dragos CAMARA" wrote:

hi,
it depends : if you have set on a GPO no override then the child will not
override the settings, if you dont then will override :)

--
Dragos CAMARA
MCSA Windows 2003 server


"Bill Bradley" wrote:

$64K question...

If I have a GPO set to ENABLE the ScreenSaver password, then, in a
subordinate OU I have a GPO that's set to DISABLE it (ALL other settings in
the subordinate GPO are set to Not Configured), the net result is it's
enabled on objects above that subordinate OU, but, disabled on objects below
(and, any other settings from the superior GPO pass through)?

Thanks.

"Dragos CAMARA" wrote:

hi,
1. use group policy filtering - go to security tab on GPO properties and on
groups of user deny read and apply that policie.
2. check loopback processing mode
http://support.microsoft.com/default.aspx/kb/231287
--
Dragos CAMARA
MCSA Windows 2003 server


"Bill Bradley" wrote:

I've been required to enable screen saver, and enable a 10 minute timeout,
and enable passwords for MOST of our users, so have a User Policy with those
settings. The enable password requirement is new, and, prior to that, we had
some users that needed to NOT have a screen saver (doctors, seeing patients,
that have xrays and other images that MUST stay open for past the timeout),
so, they could set the Screen Saver to "None".

Once enabling passwords, that method no longer works, so, I need to somehow
exclude only certain users from the password requirements, but, immediately
ran into two problems:

1. I created a sub-OU under our User OU and assigned a GPO that was only
set to Disable Screen Saver Password, with no other settings, and put the few
users in there and did a Security Filter to just those users. Waited over 2
hours, and rebooted several times, but, they're still passworded. Different
way to do this? The normal User GPO is assigned to the User OU and filtered
to Authenticated Users only. I didn't see a way to "deny" users from the
normal User GPO, like you can with NTFS rights.

2. In a LOT of cases I need to exclude the password requirement on a
COMPUTER, disregarding which user logs in. Don't see a way to apply these
settings to a computer, rather than specific users.

Thanks!
.

Relevant Pages

  • How do I set registry key permissions using GPO
    ... Screen Saver is installed and works for the most part. ... solution is to change the permissions on a registry key ... I would be very happy to have a GPO ...
    (microsoft.public.windows.server.active_directory)
  • Re: screen saver settings not taking affect
    ... an issue with how the GPO is linked. ... which group policy settings are being applied to a particular user/computer ... > 2003 server but the screen saver and the timeout don't seem to take affect ...
    (microsoft.public.windows.group_policy)
  • Re: Group policies for firewall settings and screen saver setting?
    ... Can you double check about the "log off" GPO? ... The Screen saver is "not configured" on the local computer Group Policy. ... Screensaver executable name setting or through Control Panel on the client ... >>> firewall settings are greyed out in the controll panel, ...
    (microsoft.public.windows.group_policy)
  • RE: Excluding only certain users from Screen Saver Policy settings
    ... if superior GPO have no override then the result will be "Screen Saver ... that the not configured settings will overwrite things with settings. ...
    (microsoft.public.windows.group_policy)
  • RE: Excluding only certain users from Screen Saver Policy settings
    ... "Dragos CAMARA" wrote: ... if superior GPO have no override then the result will be "Screen Saver ... that the not configured settings will overwrite things with settings. ...
    (microsoft.public.windows.group_policy)