Screen Saver Group Policy Issue

[Jim Campau]

In our Users Group Policy the sceen savers are set to lock out the session
after 15 min. All the users are in this OU. This works no problem. Then I
created another OU (Lab OU) and created a group policy for that OU that DOES
NOT allow session lockout. I placed all Lab PCs in this OU. I want the users
sessions to be locked out at 15 min. at thier desks but NOT in the Lab. Even
with both Policies applied to the Lab OU and the Lab Policy set above the
Users GP, they are still being locked out.

Please help

Thanks in advance.

Jim

 

[Chriss3]

Hi Jim. How's your OU Design looks here? GPOs are inheritance form higher
level OUs to child OUs. This can be blocked by define Block Policy
inheritance at the particular OU.

To do so right click the particular OU, click Properties and click Group
Policy Tab, below check the Block Policy inheritance option.

You can also define a GPO as No Override this means the particular policy
will override other policies and will apply.

I'm recommend you to read understanding Group Policy paper:
http://www.microsoft.com/resources/...erver/reskit/en-us/distsys/part4/dsgch22.mspx

 

[Jim Campau]

I have block inheritence on both OUs Group policy.
Both User and Lab OU's are at the same level.

 

[Chriss3]

Use the command-line based tool gpresult (Built-in at Windows Server 2003
and WindowsXP) to see applied policies and where threes settings come from.

Download gpresult tool for Windows2000:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpresult-o.asp