?
Solved

Auto Lock winXP Clients

Posted on 2009-03-29
8
Medium Priority
?
346 Views
Last Modified: 2012-05-06
Hi, i am using windows sbs 2003 sp2 R2 STD. we have 15 windows xp clients.
recently some nice ppl over here helped me to set an automatic computer lock after xx minutes.
(http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24201029.html)

i have 2 more questions:
1) how do i set a rule that a specific computer only will not be affected by this locking after XX min?
2) i tried to change the timing from 10min lock down to 20min, and it didnt work.

Help?@

Thanks
Assaf M.
0
Comment
Question by:assafm
  • 4
  • 4
8 Comments
 
LVL 8

Expert Comment

by:halejr1
ID: 24012712
Assaf,

if you set the group policy on the domain -- all computers -- then you'll need to create a separate OU for the computer(s) you want excluded...

set the group policy on that OU for your time limits requirements, and move the objects to that OU.

As for the time change from 10 to 20 minutes.  After you made the change did you apply the new policy?
0
 

Author Comment

by:assafm
ID: 24012810
after i made the change i run gpupdate /force to apply the policy.
when i go to the cloent side, and restart the computer, login, i can see the old XX min, not the new one.
second, i am a newbie, i do not know what is OU, and how to create it separate.
i know the the original change was made on the "Default Domain Policy"
0
 
LVL 8

Expert Comment

by:halejr1
ID: 24012846
open active directory users and computers
right click in the folder you want to create OU (example - computers)
click New>Organizational Unit> and name your unit

then right click on unit and edit the group policy object for that OU with the parameters that you are trying to setup.
Move computer that you want to apply that policy into that OU (you can drag and drop or right click move)

and that is it...

for the 20 minutes not showing up, go back into your group policy and see if the change is still listed.
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:assafm
ID: 24013273
I opened active directory users and computers
I then went to computers folder, right click it and choose New
the options i get is:
Computer
Contact
Group
InetOrgPerson
Query-based Distribution Group
MSMQ Queue Alias
Printer
User
Shared Folder

i can not see Organizational Unit
0
 
LVL 8

Expert Comment

by:halejr1
ID: 24013430
sorry right click on the domain.
0
 

Author Comment

by:assafm
ID: 24013885
1.
ok. i created the Organizational Unit. and moved my computer to it.
now, how can i set a group policy that will apply to this Organizational Unit only?

info: The last change (autolock computers after 10 min) i made was for the "Default Domain Policy".
2.
regarding my 2nd question, i changed on the server the screen saver timing from 10min to 20min, i select "On resume, password protected".
i even restart the server, and restart my client. but when i log in, it still lockdown after 10min.

please help

Thanks,
Assaf M.
0
 

Author Comment

by:assafm
ID: 24022289
please help
0
 
LVL 8

Accepted Solution

by:
halejr1 earned 2000 total points
ID: 24022524
assafm -- thought I replied yesterday....

-- Regarding 2 above -- when you made the change at the server, it still reverts back to the domain controller policy that is set in active directory.  So whatever changes you make on the server itself don't matter....

For the OU -- right-click on the OU and select properties>group policy>open

Here you can edit the group policy of that group and it should apply to the system that is a member of that OU.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question