Configure a GPO (machine/user) for a specific computer




On my network (2003 server and XP computer), I have configured GPO to
activate some parameters in computer and user environment.

But some computer are shared. On these computers, I don't want to applied
user configuration GPO. For example, if an user logged on his computer,
password is set for savescreen. If the same user logged on a shared computer,
password is not set for savescreen.

Can I do that? If yes, How?

Mark Renoden [MSFT]


You're talking about user policy which is being applied to the user account
and is independant of the computer account. ie the user settings follow the

To overcome this you could use a separate OU for the shared computers and
create a GPO that has the same computer settings as the original GPO but no
user settings. You'd then set policy loopback:

231287 Loopback Processing of Group Policy

Kind regards
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question