Re: User GPO not applying

Tech-Archive recommends: Fix windows errors by optimizing your registry

Howdie Dave!

Dave schrieb:
When I run the Group Policy Modeling tool, it shows that this part of the policy should be applied to that OU. However, when I run the Group Policy Results tool, the Screen Saver settings do not show up and are not applied to the computers in the Shared OU.

If you are saying that I can't apply this setting to the computers in this OU in this way, then how can I set the Screen Saver options only for this OU?

Screensaver settings are under the "User Configuration" node, so they're meant to trigger user objects in OUs of Active Directory. So when you're creating a OU, put users into that OU and apply the screensaver policy to it, you'll see the policy will get applied.

This is the default behavior of Group Policy application: "User Configuration" settings will only be processed by user objects that are in the OU (and SubOUs) you linked the policy to.

Pretty much the same way do "Computer configuration" settings behave - they'll apply only to the computer objects that are in the OU (and SubOUs) you linked the policy to.

That said, you've got two options from now:
(1) Put some user accounts into the OU you linked your screensaver policy to. This would be recommended if you haven't organized your user objects in AD and can move things around without breaking too much.

If you already have a static structure and want - for example - all users who log on to those machines in the shared-OU to apply that screensaver, you can use "Loopback Processing Mode". It is a Computer Configuration policy which makes the computer objects in the OU "look at" both the "Computer Configuration" settings configured for them as well as the "User Configuration" settings that are enabled in their OUs and SubOUs. Loopback helps you enforce a particular "User Configuration" setting on certain machines for all users.

Somewhat clearer now? I'm sorry for confusing you. Feel free to post back if you have any further questions.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.

Relevant Pages

  • Re: Do Not Execute Group Policy for Admins Group
    ... The intent of policy loopback is to replace or merge user configuration ... The computer configuration settings from this list are applied to the ... > so that the group policy will only apply to a certain group of users ...
    (microsoft.public.win2000.group_policy)
  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)