• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 197
  • Last Modified:

Group Policy Problem

Hello,

I have a group policy problem.....scenario:

1) Created several organization units in the AD to group users together for certain logon scripts.....no problem.
2) Created a group policy and applied it to the various organizational units.....again no problems

This policy is the new default domain policy.  It contains settings for the Windows XP firewall and desktop screen saver.
Screen saver settings enforce the time until screensaver kicks in and forces password unlock of screen saver.

Here is the problem.....There is a set of 4 PCs which must have the screen saver timer increased from 17 minutes to 90 minutes.  So, I have created another organizational unit and put the users which utilized those PCs into this new organization unit.  I took the my default domain policy, maded the timer changes and saved it as a different name.
Applied the different name to the organizational unit.

Well,  obviously I do not know what I am doing, since it overlaid my original default domain policy for every OU.
All PCs are now at the different screen saver time level.

Question.....even though I saved the policy (mmc console?) as different name, it still was the original site default domain policy.  How do I save it as a different name.....a really different policy?

Please advise.  thanks.

BTW,  I am using the Group Policy Management Console, I downloaded from Microsoft.

 
0
rstuemke
Asked:
rstuemke
  • 2
  • 2
1 Solution
 
CGretskiCommented:
right-click on OU "Create and link policy here"
It need only contain the different timer interval, as the OU should inherit the rest of the settings from default domain policy  ( also you'll need to edit your default domain policy to change it back to how it was/should be )
0
 
rstuemkeAuthor Commented:
Perhaps I mis communicated my problem.  The problem is not linking the policy.  I have got that to work.  The problem is creating a new policy with a different name.  That is what I can not do......even though I created the original from the default domain policy.  I seem to have forgotten how to do it or something......that is where I need the help.  Thanks.
0
 
CGretskiCommented:
Create and link will do both steps --don't copy a policy from another... create a blank -- all it's settings will be undefined, so just set the ones you want

Also ensure it's only linked to that OU, and not to the domain, and that's it's a higher priority than the domain policy ( so it's settings override the inherited ones)

The other way to control it would be to set the new policy at domain level, but only give apply permissions to those few computer accounts.
0
 
rstuemkeAuthor Commented:
Thanks.  That did it.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now