• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 347
  • Last Modified:

Auto Lock winXP Clients

Hi, i am using windows sbs 2003 sp2 R2 STD. we have 15 windows xp clients.
recently some nice ppl over here helped me to set an automatic computer lock after xx minutes.

i have 2 more questions:
1) how do i set a rule that a specific computer only will not be affected by this locking after XX min?
2) i tried to change the timing from 10min lock down to 20min, and it didnt work.


Assaf M.
  • 4
  • 4
1 Solution

if you set the group policy on the domain -- all computers -- then you'll need to create a separate OU for the computer(s) you want excluded...

set the group policy on that OU for your time limits requirements, and move the objects to that OU.

As for the time change from 10 to 20 minutes.  After you made the change did you apply the new policy?
assafmAuthor Commented:
after i made the change i run gpupdate /force to apply the policy.
when i go to the cloent side, and restart the computer, login, i can see the old XX min, not the new one.
second, i am a newbie, i do not know what is OU, and how to create it separate.
i know the the original change was made on the "Default Domain Policy"
open active directory users and computers
right click in the folder you want to create OU (example - computers)
click New>Organizational Unit> and name your unit

then right click on unit and edit the group policy object for that OU with the parameters that you are trying to setup.
Move computer that you want to apply that policy into that OU (you can drag and drop or right click move)

and that is it...

for the 20 minutes not showing up, go back into your group policy and see if the change is still listed.
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

assafmAuthor Commented:
I opened active directory users and computers
I then went to computers folder, right click it and choose New
the options i get is:
Query-based Distribution Group
MSMQ Queue Alias
Shared Folder

i can not see Organizational Unit
sorry right click on the domain.
assafmAuthor Commented:
ok. i created the Organizational Unit. and moved my computer to it.
now, how can i set a group policy that will apply to this Organizational Unit only?

info: The last change (autolock computers after 10 min) i made was for the "Default Domain Policy".
regarding my 2nd question, i changed on the server the screen saver timing from 10min to 20min, i select "On resume, password protected".
i even restart the server, and restart my client. but when i log in, it still lockdown after 10min.

please help

Assaf M.
assafmAuthor Commented:
please help
assafm -- thought I replied yesterday....

-- Regarding 2 above -- when you made the change at the server, it still reverts back to the domain controller policy that is set in active directory.  So whatever changes you make on the server itself don't matter....

For the OU -- right-click on the OU and select properties>group policy>open

Here you can edit the group policy of that group and it should apply to the system that is a member of that OU.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Train for your Pen Testing Engineer Certification

Enroll today in this bundle of courses to gain experience in the logistics of pen testing, Linux fundamentals, vulnerability assessments, detecting live systems, and more! This series, valued at $3,000, is free for Premium members, Team Accounts, and Qualified Experts.

  • 4
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now