Help !

First off I'm pretty new to Group Policies. I come from a Novell Background
where policies were applied locally. we're converting to Activy Directory.
I've also read a number of the postings here on the forums. But I can seem to
apply a Group policy to a computer group.

Scenario - We apply a standard screen saver across the company, for a few
specific computers not users we don't want the screen saver.

I've read about Loopback Processing and I'm trying to apply it but it
doesn't appear to work.

Here is what I've done. Created 2 GPOs

The first GPO "Standard Screen saver" - Applies a screen saver. It is
linked to the computers container and the security filter is set to
"Authenticated Users" This Policy works fine.

The second GPO "Screen Saver Exempt" - applies a different screensaver. I've
enable LoopBack Processing in Merge mode. Its is linked again to the
computers container but the security filtering is set to a security group I
created called "Exempt group", in this group I'm adding the computers I do
not want the first screen saver to apply. This GPO is not working. It works
if I add the user to the group but not If just add the computer.

Anybody have any suggestions ?

Hi!

I might be missing something here... Can you tell us whic policies were set,
exactly? As far as I know screen server policy is set per user not per
computer in other words you can not apply this settings to computer
accounts.

HTH

Toni


"Tbird" <(E-Mail Removed)> wrote in message
news:4D95C27B-58CD-4830-BC28-(E-Mail Removed)...
> Help !
>
> First off I'm pretty new to Group Policies. I come from a Novell
> Background
> where policies were applied locally. we're converting to Activy Directory.
> I've also read a number of the postings here on the forums. But I can seem
> to
> apply a Group policy to a computer group.
>
> Scenario - We apply a standard screen saver across the company, for a few
> specific computers not users we don't want the screen saver.
>
> I've read about Loopback Processing and I'm trying to apply it but it
> doesn't appear to work.
>
> Here is what I've done. Created 2 GPOs
>
> The first GPO "Standard Screen saver" - Applies a screen saver. It is
> linked to the computers container and the security filter is set to
> "Authenticated Users" This Policy works fine.
>
> The second GPO "Screen Saver Exempt" - applies a different screensaver.
> I've
> enable LoopBack Processing in Merge mode. Its is linked again to the
> computers container but the security filtering is set to a security group
> I
> created called "Exempt group", in this group I'm adding the computers I do
> not want the first screen saver to apply. This GPO is not working. It
> works
> if I add the user to the group but not If just add the computer.
>
> Anybody have any suggestions ?

Right-
When you're filtering loopback policy for user objects, you need to use
user-specific security groups, just as you normally one in non-loopback
mode. Computer filtering will just be ignored by the user policy. What you
might want to consider doing here is to put a Deny ACE in the Standard
Screen Saver GPO for the user group (if you can tie those computers to
particular users) that you don't want to receive the screen saver policy.

Darren
--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
Group Policy Management solutions at http://www.sdmsoftware.com


"T. Uranjek" <(E-Mail Removed)> wrote in message
news:u0PH56q$(E-Mail Removed)...
> Hi!
>
> I might be missing something here... Can you tell us whic policies were
> set, exactly? As far as I know screen server policy is set per user not
> per computer in other words you can not apply this settings to computer
> accounts.
>
> HTH
>
> Toni
>
>
> "Tbird" <(E-Mail Removed)> wrote in message
> news:4D95C27B-58CD-4830-BC28-(E-Mail Removed)...
>> Help !
>>
>> First off I'm pretty new to Group Policies. I come from a Novell
>> Background
>> where policies were applied locally. we're converting to Activy
>> Directory.
>> I've also read a number of the postings here on the forums. But I can
>> seem to
>> apply a Group policy to a computer group.
>>
>> Scenario - We apply a standard screen saver across the company, for a few
>> specific computers not users we don't want the screen saver.
>>
>> I've read about Loopback Processing and I'm trying to apply it but it
>> doesn't appear to work.
>>
>> Here is what I've done. Created 2 GPOs
>>
>> The first GPO "Standard Screen saver" - Applies a screen saver. It is
>> linked to the computers container and the security filter is set to
>> "Authenticated Users" This Policy works fine.
>>
>> The second GPO "Screen Saver Exempt" - applies a different screensaver.
>> I've
>> enable LoopBack Processing in Merge mode. Its is linked again to the
>> computers container but the security filtering is set to a security group
>> I
>> created called "Exempt group", in this group I'm adding the computers I
>> do
>> not want the first screen saver to apply. This GPO is not working. It
>> works
>> if I add the user to the group but not If just add the computer.
>>
>> Anybody have any suggestions ?
>
>