GPO question

Posted on 2008-02-05
Medium Priority
Last Modified: 2010-04-21
I turned the password protect on in group policy and set it for 8 minutes. my question is I have an engineering group that this should not turn on I was wondering the engineers are in the everyone group which is what i linked the gpo to. can I use an engineering group and disable the password protect even though they are still in the everyone group?
Question by:whiteblue462
LVL 31

Assisted Solution

by:Toni Uranjek
Toni Uranjek earned 200 total points
ID: 20823024

Yes, use Security filtering:

1. Open the Group Policy Management Console (GPMC)
2. Expand the console tree until you see the Group Policy Objects node.
3. Select the "Screen saver GPO" under the Group Policy Objects node.
4. Select the Delegation tab in the right-hand pane.
5. Click Advanced... button.
6. Add the Engineers group and select the following permission: "Apply group policy" Deny!.

Run gpupdate /force on client computer.


LVL 70

Accepted Solution

KCTS earned 600 total points
ID: 20823052
I always try and avoid deny - It leads to problems - I would be tempted to put the engineers in their own OU and link a contrary policy directly to the OU.

Author Closing Comment

ID: 31428113
I gave KCTS the most points because I'd have to agree that deny does cause problems  both solutions will work as I tested both so thank you both in the quick response....

Featured Post

Firewall Management 201 with Professor Wool

In this whiteboard video, Professor Wool highlights the challenges, benefits and trade-offs of utilizing zero-touch automation for security policy change management. Watch and Learn!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It's not just another paperwork submission. Serious planning and rigour to managing the whole thought processes need to be put in place. The intent is not on drilling into the details, but to share tips in getting the first thing right to kick-start…
Although free tools can be helpful to a limited extent, it’s better to stick to paid versions for business use.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Get the source code for a fully functional Access application shell with several popular security features that Access VBA application developers desire, but find difficult or impossible to figure out how to code. You get the source code for managi…

593 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question