Re: Group policy effective in Win 2003

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

DD,

DD wrote:
Now I have configured screen saver timeout for Director OU as 60min and User OU as 5min but the users in User OU the screen saver does not appear after 5min which seems the Director OU is overwriting the User OU, but i cant move the User OU up as alphabetically U comes after D. what should be done so that both the Group policies of respective OU should work

To get you correct: you have those two OUs at the same level meaning they have the same parent OU. You created two GPs, one for the DirectoryOU and one for the UserOU and linked the UserOU-GPO to the UserOU and the DirectrOU-GPO to the DirectorOU, correct?

Can you make sure you hit the right settings so that the users have 5 minutes configured? Can you run rsop.msc on one of the clients to make sure the screensaver policy you configured is winning (meaning there's no other policy overwriting it)? Is inheritance blocking configured?

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
.

Relevant Pages

  • Re: Screensaver lockout in Group Policy
    ... What exact policy setting are you working with? ... off of the top of my head I think you are saying you 'lock the workstation' ... In policy you have "Hide Screen Saver", which hides the screen saver tab ...
    (microsoft.public.win2000.group_policy)
  • Re: Loopback processing not working
    ... Well you could just deny the right to apply the policy for the screen saver ... I understand that loopback processing within a policy is the route to go ... Policy Setting ... Password protect the screen saver Enabled ...
    (microsoft.public.windows.server.active_directory)
  • RE: ScreenSaver timeout problem via GPO
    ... Number of Seconds to wait to enable the Screen Saver = Enabled at 0 Seconds ... give you some facts about these laptops so you know the situation. ... This policy is not enforced so if a lower OU blocks inheritance it ... loopback processing and it would still run if in the correct order. ...
    (microsoft.public.windows.server.active_directory)
  • RE: ScreenSaver timeout problem via GPO
    ... Did you ever get loopback to work or find out why it did not? ... The laptops are joined to a 2003 domain and live in various OUs. ... There is a GPO at the domain level that activates a screen saver at 15 ... This policy is not enforced so if a lower OU blocks inheritance it ...
    (microsoft.public.windows.server.active_directory)
  • Re: Reverting GPO settings back to Default
    ... Well, keep in mind that Screen Saver policy is per-user, so if the user account isn't moving to a different OU as well, then nothing is going to change for that user, regardless of where their laptop computer account resides. ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ...
    (microsoft.public.windows.group_policy)