dale-gregory
asked on
Group policy setting policy for all users
When I create a default profile on a Windows XP, it is inheriting the User Settings in Group Policy for the copied user to all users. Users are not getting the Group Policy settings that are not designated for them, but inheriting it from the default profile.
example: I have a policy that automatically locks a PC after a period of inactivity. This policy is applied to my account. If I use my account to create a local default user, all users that use that PC are getting the automatic lock regardless of what is set to their account in Group Policy.
example: I have a policy that automatically locks a PC after a period of inactivity. This policy is applied to my account. If I use my account to create a local default user, all users that use that PC are getting the automatic lock regardless of what is set to their account in Group Policy.
Skol2u
Is there possibly a computer policy over riding your user's policy that is effecting the policies?
I would agree that doesnt sound right. I would first check as stated to make sure you dont have a conflicting GPO being applied.
You could run a GPupdate /force and then a gpresult while logged in as the other user to see what is being applied.
A few other normal things to check make sure you arent trying to set user policies based on a computer or vice versa.
You could run a GPupdate /force and then a gpresult while logged in as the other user to see what is being applied.
A few other normal things to check make sure you arent trying to set user policies based on a computer or vice versa.
ASKER
When I run the gpresult, under the other user's account, I get the correct settings for that user. There is normally a setting under the gpedit/Local Policy under User Settings\Windows Settings Control Panel that can be disabled to stop the locking screensaver. The Control Panel Option isn't even listed in the Local Policy now.
In any case, I have a Pc that is locking on every user after a period of inactivity. Not totally a bad thing, but the user is having a fit to have it removed and I cannot get it to apply their GPO User Settings to their local account.
In any case, I have a Pc that is locking on every user after a period of inactivity. Not totally a bad thing, but the user is having a fit to have it removed and I cannot get it to apply their GPO User Settings to their local account.
You can run RSOP.MSC to check which is the actual policy applied on domain user.
Run gpupdate /force & check what is logged into event viewer of application or system log.
Check folder redrection in GPO as well as Loopbackpolicy enabled on domain level.
Run gpupdate /force & check what is logged into event viewer of application or system log.
Check folder redrection in GPO as well as Loopbackpolicy enabled on domain level.
ASKER
I have tried these solutions and I am awaiting feedback from my user. Thanks for your help and I will follow up as soon as I findo ut how this is working under their account logon.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.