Group Policy Argument

  • Thread starter Thread starter The Daddy
  • Start date Start date
T

The Daddy

I am currently re-structuring my Active Directory. This
includes applying Group Policies. On the 'Default Domain
Policy' I have various settings applied. Some examples of
the settings are:
Password Policy under 'Computer Configuration,' 'Windows
Settings,' 'Security Settings,' 'Password Policy.'

Screen Saver to be activated and password protected
under 'User Configuration,' 'Administrative
Templates,' 'Control Panel,' 'Display.'

Add Logoff to Start Menu under 'User
Configuration,' 'Administrative Templates,' 'Start Menu &
Taskbar.'

A particular user does not want the screen saver to be
activated so i have created a Group Policy for the OU
that this user is part of, and only applied the GPO to
this user.

I understand that the password policy from the Default
Domain Policy has a built in no override so that will
still apply to the user in question. However, I am told
that to exclude the screen saver policy, a comparison is
done between the Domain Policy and the OU policy and
because it is set to 'Not Configured' on the OU Policy,
it will take priority and the screensaver policy will not
be applied.

I am fine with this but where I become confused is that
add logoff to the start menu is configured on the Domain
Policy and not configured on the OU Policy but on this
occasion the OU policy does not take priority and logoff
is still on the Start menu.

WHY ON EARTH NOT? RATHER THAN TRY AND UNDERSTAND THIS I
MIGHT AS WELL BANG MY HEAD AGAINST THE WALL. HELP!!!
 
The problem is that the logoff policy on the OU has been left as 'Not
Configured' which means that the OU Group Policy will ignore this setting
and accept whatever the default domain policy gives it. Try setting the
logoff policy to Disabled on the OU Group Policy, that should fix it.
 
No but the screensaver policy is left as 'not configured'
on the OU policy and in this case it overrides
the 'enabled' bit on the Default Domain policy.
The same theory however does not apply for the logoff
policy.
 
Back
Top