• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 311
  • Last Modified:

block desktop lock in default domain policy on some stations

I have an entry in my default domain policy to lock workstations after 30 min. it's causing a problem on one of my servers. is it possible to block just this entry in the defaut domain policy for just this server?

2 Solutions
Yes, that's possible with GPO Loopback processing.
Move this server into its own OU. Create a GPO "Lopback" and link it to this OU; enable the Loopback mode as described in the article below, and set it to Merge. Reboot the server.
Now link an additional(!) GPO "DisableScreenSaver" or whatever in which you disable the screen saver in the User Configuration to this OU; this GPOs will be processed for every user logging on to the server, even though the user object is not in/below the OU.

Loopback processing of Group Policy

Couple of options here:

You could also probably use a WMI filter, such as
SELECT * FROM Win32_ComputerSystem WHERE Name = 'MyComputer'
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now