Re: Question about GPO

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I don't want to say "yes use replace" because I do not know what impact that
will have on your environment.

What I can say is that using merge is probably what is causing this
particular issue for you.

If you can test it first that would be the way to go.

"John" wrote:

That's correct, I am using Merge. So I should use replace?

"Dan" wrote:

Loopback processing has several modes (Replace, Merge). I'm guessing you have
Merge which is probably why your login script is running twice.

Please read this:
http://technet2.microsoft.com/WindowsServer/en/library/abe2b1a9-975f-4b2f-b771-9e6a903e97db1033.mspx?mfr=true



"John" wrote:

The logon script is only in there once. It is located on the top level of
the domain. I can not figure out why the logon script is running twice and
it all started with the loopback policy.

"Mathieu CHATEAU" wrote:

put only once the logon script...

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"John" <John@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1FE566AA-94E0-41EA-A26B-316D7241FA74@xxxxxxxxxxxxxxxx
Jorge

I did find a problem. It is running my logon script twice.

John

"Jorge Silva" wrote:

Hi
Before you start playing with loopback policy, I would suggest you to
think
again, especially if you're messing with DC configurations.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"John" <John@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4936A43B-9CE1-4220-BDB1-DD42B688E2F2@xxxxxxxxxxxxxxxx
So this is what I do....

In the GPO for the DCs, I enable loopback processing with the merge to
merge
my screen saver setting of 120 minutes in with the user's 20 minute.
The
120
minute should win and set it because the location of the workstation in
the
the OU with this GPO... right...

"Mathieu CHATEAU" wrote:

Hello,

you can't.

But you can place a User GPO in the DC OU, and set loopback
processing.
So
user GPO will be applied when logging on computers

Using Loopback Processing to Configure User Settings
http://technet2.microsoft.com/windowsserver/en/library/33a8ff54-151a-47b7-a6c3-92aab07c2d131033.mspx?mfr=true

Loopback processing of Group Policy
http://support.microsoft.com/kb/231287/en-us



--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"John" <John@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:18DF55DA-8E6C-4166-BE24-D8F4ED112B50@xxxxxxxxxxxxxxxx
That is what I have been doing. Here is what I think is going on.
I
am
using the Administrator's account (we are in a test enviroment) to
log
in
to
the DCs. Because the setting is a user config, the user
(Administrator)
must
be in the OU, Domain Controllers. Once I moved the user
(Administrator)
to
the Domain Controler OU the GPO was applied.

I want to apply to a computer the screen saver, not per user. How
do I
do
that?

"Mathieu CHATEAU" wrote:

Hello,

for the workstation, put the GPO in the OU of workstation (you
would
make
an
organisational unit to store workstation and to link GPO. The
default
OU
computers can't).

Put the setting for DC on a new gpo linked on the DC OU (better
than
changing the default one)

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"John" <John@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:81BD2F07-B3D0-4646-8E70-65510D80093E@xxxxxxxxxxxxxxxx
Lets assume I have a standard install of windows server 2003 R2,
installed
AD, installed gpmc.msi. I wanted to create a screen saver GP
where
it
applies to all workstations in the domain. However, when loggin
to
the
Domain Controlers I want a different screen saver GP.

ScreenSaverWorkstation <-- 30 minute time out, password

ScreenSaverDC <-- 120 minute time out, password

If this is an standard install, how would I configure GP to work
this
way.
I have been bumping my head around about this issue.

TIA
John









.

Relevant Pages

  • Re: Question about GPO
    ... Loopback processing has several modes ... "Mathieu CHATEAU" wrote: ... In the GPO for the DCs, I enable loopback processing with the merge to ... I want to apply to a computer the screen saver, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Question about GPO
    ... "Mathieu CHATEAU" wrote: ... In the GPO for the DCs, I enable loopback processing with the merge to ... Using Loopback Processing to Configure User Settings ... I want to apply to a computer the screen saver, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Question about GPO
    ... "Mathieu CHATEAU" wrote: ... In the GPO for the DCs, I enable loopback processing with the merge to ... Using Loopback Processing to Configure User Settings ... I want to apply to a computer the screen saver, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group policies for firewall settings and screen saver setting?
    ... Enforced means no other GPO can change it. ... English blog: http://lordoftheping.blogspot.com ... "Mathieu CHATEAU" wrote: ... > The Screen saver is "not configured" on the local computer Group> Policy. ...
    (microsoft.public.windows.group_policy)
  • Re: GPO to Disable Screen Saver on a Single Computer
    ... I have the loopback processing set to merge. ... disable screen saver for that OU's GPO that the computer is in. ...
    (microsoft.public.win2000.group_policy)