group policy quick question

[graeme welsh]

hello

we have a number of systems where we dont want screensaver to become active.
so, set up an OU, then placed these machines in the OU, configured a GPO on
this OU to disable screen saver, turn off timeout etc, GPO wasnt applied, i
then put a user in this OU, and the policy was applied (settings over
display etc are in the user configuration containet of the group policy)
i thought that even if there were no users in the OU, then the policy would
still apply to users logging into this machines? or am i wrong? does the
user configuration part of a policy only affect users which are in the OU?
(and vice versa for machine related policies on users?)
it seems a bit of drawback if it is....

graeme

 

[Guest]

-----Original Message-----
hello

we have a number of systems where we dont want screensaver to become active.
so, set up an OU, then placed these machines in the OU, configured a GPO on
this OU to disable screen saver, turn off timeout etc, GPO wasnt applied, i
then put a user in this OU, and the policy was applied (settings over
display etc are in the user configuration containet of the group policy)
i thought that even if there were no users in the OU, then the policy would
still apply to users logging into this machines? or am i wrong? does the
user configuration part of a policy only affect users which are in the OU?
(and vice versa for machine related policies on users?)
it seems a bit of drawback if it is....

graeme


.

Graeme,
If I understand what you're trying to do, you might want
to use loopback processing on the GPO.
http://support.microsoft.com/default.aspx?kbid=231287
It allows you to apply the settings in the GPO to anyone
who logs on to the machine. Of course, you can deny the
policy to Domain Admins or Tech Staff if necessary.
HTH,
Dave

 

[graeme welsh]

perfect answer!
thanks

Graeme,
If I understand what you're trying to do, you might want
to use loopback processing on the GPO.
http://support.microsoft.com/default.aspx?kbid=231287
It allows you to apply the settings in the GPO to anyone
who logs on to the machine. Of course, you can deny the
policy to Domain Admins or Tech Staff if necessary.
HTH,
Dave