User GPO setting stays on computer?

[Mike Towan]

I have a GPO set up to affect users of a particular OU so that when they log
on to a computer, the logon screen saver activates after 15 minutes of
inactivity and requires a password to unlock. It has been working great.

However, there are some users not in the OU complaining that their screen
savers have been invoking. These are laptops that have been used at one
time or another by the users in the affected OU. Running GPRESULT on the
machine does not show the particular policy being enforced on generic users,
just as it shouldn't. However, it seems like that setting is sticking
somewhere on the laptop and affecting users I don't want it to apply to.

Any help would be great!

 

[Steven L Umbach]

That is a user configuration setting that should not apply to other users never in
the OU. I would check the Local Security Policy via gpedit.msc or instruct them how
to use display properties to change/disable the setting. Make sure that "loopback
processing" is not enabled on the OU that the laptops reside in which can apply user
settings based on the OU that the computer is in. --- Steve


]